1 matches found
DIRAC: Pilot code downloaded over unverified HTTPS connection
SummaryThe second stage pilot pilot.tar is downloaded by the initial wrapper script without any verification of the webservers' SSL certificate and the contained script is subsequently executed. The checksum is tested, but the reference checksum file is downloaded over the same unvalidated channe...
8.1CVSS5.9AI score0.00235EPSS
SaveExploits0References8Affected Software1
20