1 matches found
Insecure TLS Configuration
aws-cdk-lib is vulnerable to Insecure TLS configuration. The vulnerability is due to the tls.connect method setting rejectUnauthorized: false by default, which allows connections to unauthorized OIDC providers without verification. This could potentially allow attackers to exploit insecure...
8.1CVSS6.6AI score0.00324EPSS
SaveExploits0References8Affected Software1
20