Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:4580
HistoryJul 17, 2017 - 5:32 p.m.

Missing Certificate Verfication

2017-07-1717:32:25
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6

0.001 Low

EPSS

Percentile

37.1%

txAWS is missing certificate verification. The library does not properly verify TLS Certificates, allowing a self-signed, expired and mismatched certificate to communicate with the TLS server This can lead to a man-in-the-middle attack or information disclosure.

CPENameOperatorVersion
txawsle0.2.3.1

0.001 Low

EPSS

Percentile

37.1%