Threats tagged 'ghsa-82fm-wpc2-5pmp'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	4.8	CVE-2026-40557Org.apache.storm:storm metrics prometheus: Apache Storm Prometheus Reporter vulnerable to Improper Certificate Medium4.82026-04-27GCVE DatabaseCVE-2026-40557 Apache Storm Prometheus Reporter versions 2.6.3 through 2.8.6 have an improper certificate validation vulnerability caused by a global SSL context downgrade when the skip_tls_validation option is enabled. This insecure configuration disables SSL certificate checks JVM-wide, allowing man-in-the-middle attacks on all TLS connections within the Storm daemon process. The issue is fixed in version 2.8.7. Report on CVE-2026-40557 Vulnerability CWE-295 #ghsa-82fm-wpc2-5pmp #maven	GCVE Database	2026-04-27

Page 1 of 1