Moole Vulnerability Database

Find real vulnerabilities before they ship

Critical

CVE-2020-24714

The Scalyr Agent before 2.1.10 has Missing SSL Certificate Validation because, in some circumstances, the openssl binary is called without the -verify_hostname option.

VectorNETWORK

PublishedAug 27, 2020, 22:15

Published Bycve@mitre.org

Base Score

Score9.8

Affected Versions

Package (Ecosystem)IntroducedFixedLimit

scalyr-agent-2(PyPI)02.1.10N/A

References

https://scalyr-static.s3.amazonaws.com/technical-details/index.html

Weakness Type

CWE-295

CVSS Metrics

Base Score

9.8

Vector String

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Base SeverityCritical

Version

3.1

Attack Vector (AV)

NETWORK