1 threat
Most recently published first
A vulnerability exists in the ssl.get_server_certificate() function when the ca_certs parameter is supplied. In this case, the identity of the certificate is not checked, potentially undermining the trust model of SSL certificate validation.
Page 1 of 1