Lucene search
+L

1 matches found

PyPA
PyPA
added 2026/07/23 11:41 a.m.45 views

DIRAC: Pilot code downloaded over unverified HTTPS connection

SummaryThe second stage pilot pilot.tar is downloaded by the initial wrapper script without any verification of the webservers' SSL certificate and the contained script is subsequently executed. The checksum is tested, but the reference checksum file is downloaded over the same unvalidated channe...

8.1CVSS5.9AI score0.00235EPSS
SaveExploits0References8Affected Software1
Rows per page
Query Builder