Non notée

CVE-2020-1929 The Apache Beam MongoDB connector in versions 2.10.0 to 2.16.0 has an option to disable SSL trust verification

Description

The Apache Beam MongoDB connector in versions 2.10.0 to 2.16.0 has an option to disable SSL trust verification. However this configuration is not respected and the certificate verification disables trust verification in every case. This exclusion also gets registered globally which disables trust checking for any code running in the same JVM.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
Beam	Versions non publiées

Références

[beam-user] 20200115 [CVE-2020-1929] Apache Beam MongoDB IO connector disables certificate trust verification lists.apache.org

Chronologie

Publiée 15 janvier 2020
Dernière modification 4 août 2024

Suivre cette CVE