CVE-2020-24715

The Scalyr Agent before 2.1.10 has Missing SSL Certificate Validation because, in some circumstances, native Python code is used that lacks a comparison of the hostname to commonName and subjectAltName...

CVE-2020-24715

The vulnerability described across connected records concerns the Scalyr Agent before version 2.1.10, where SSL certificate validation is incomplete because native Python code can fail to compare the hostname with commonName and subjectAltName in some circumstances. This can weaken TLS verificati...