Lucene search
Veracode Vulnerability DatabaseVERACODE:40245HistoryApr 21, 2023 - 5:17 a.m.
Improper Certificate Validation
2023-04-2105:17:45
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
ssl
vulnerability
man-in-the-middle
validation
EPSS
0.001
Percentile
41.9%
bigflow is vulnerable to Improper Certificate Validation. The vulnerability due to improper SSL certificate validation in the get_vault_token function which allows an attacker to preform a Man-in-the-Middle attack.
Related
nvd
nvd
CVE-2023-25392
2023-04-10 14:15:09
osv
osv
CVE-2023-25392
2023-04-10 14:15:09
Allegro Tech BigFlow vulnerable to Missing SSL Certificate Validation
2023-04-10 15:30:26
prion
prion
Input validation
2023-04-10 14:15:00
cve
cve
CVE-2023-25392
2023-04-10 14:15:09
github
github
Allegro Tech BigFlow vulnerable to Missing SSL Certificate Validation
2023-04-10 15:30:26
cvelist
cvelist
CVE-2023-25392
2023-04-10 00:00:00