Lucene search
+L

1 matches found

Veracode
Veracode
added 2025/01/24 12:26 p.m.7 views

Insecure TLS Configuration

aws-cdk-lib is vulnerable to Insecure TLS configuration. The vulnerability is due to the tls.connect method setting rejectUnauthorized: false by default, which allows connections to unauthorized OIDC providers without verification. This could potentially allow attackers to exploit insecure...

8.1CVSS6.6AI score0.00317EPSS
SaveExploits0References8Affected Software1
Rows per page
Query Builder