Lucene search
+L

1 matches found

PyPA
PyPA
•added 2026/07/23 11:41 a.m.•53 views

DIRAC: Pilot code downloaded over unverified HTTPS connection

SummaryThe second stage pilot pilot.tar is downloaded by the initial wrapper script without any verification of the webservers' SSL certificate and the contained script is subsequently executed. The checksum is tested, but the reference checksum file is downloaded over the same unvalidated channe...

8.1CVSS6.7AI score0.00396EPSS
SaveExploits0References8Affected Software1
Rows per page
Query Builder