Skip to content

Java: CWE-273 Unsafe certificate trust #3550

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
aschackmull merged 5 commits into from
Jun 29, 2020
+563 −0
Merged

Java: CWE-273 Unsafe certificate trust #3550

Changes from 1 commit
Commits
Show all changes
5 commits
Select commit Hold shift + click to select a range
6d1ba3f
Java: CWE-273 Unsafe certificate trust
luchua-bc May 24, 2020
104f1c3
Add validation query for SSL Engine/Socket and com.rabbitmq.client.Co…
luchua-bc May 28, 2020
deabfe6
Adjust id tag and fix ending line error
luchua-bc Jun 23, 2020
f8c4947
Fix ending line error
luchua-bc Jun 23, 2020
0779aab
Clean up the QL code
luchua-bc Jun 24, 2020
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
Fix ending line error
  • Loading branch information
@luchua-bc
luchua-bc committed Jun 23, 2020
commit f8c494716fa0800b0b4d95e83222a68ae79e1ee0
1 change: 0 additions & 1 deletion java/ql/src/experimental/Security/CWE/CWE-273/UnsafeCertTrust.ql
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -226,4 +226,3 @@ where
aa instanceof SSLEndpointIdentificationNotSet or
aa instanceof RabbitMQEnableHostnameVerificationNotSet
select aa, "Unsafe configuration of trusted certificates"