Improper Certificate Validation

2023-02-1607:09:00

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

certificate validation

third-party apis

rest api

remote attacker

https

http

user interface

EPSS

0.001

Percentile

32.1%

JSON

cloudconnectlib is vulnerable to Improper Certificate Validation. Requests to third-party APIs through the REST API Modular Input allows a remote attacker to downgrade the API request to HTTP after a connection over HTTPS fails when the REST API Modular Input functionality is used through its user interface.