Skip to content

Commit deabfe6

Browse files
committed
Adjust id tag and fix ending line error
1 parent 104f1c3 commit deabfe6

File tree

1 file changed

+3
-2
lines changed

1 file changed

+3
-2
lines changed

java/ql/src/experimental/Security/CWE/CWE-273/UnsafeCertTrust.ql

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,8 +1,8 @@
11
/**
2-
* @id java/unsafe-cert-trust
32
* @name Unsafe implementation of trusting any certificate or missing hostname verification in SSL configuration
43
* @description Unsafe implementation of the interface X509TrustManager, HostnameVerifier, and SSLSocket/SSLEngine ignores all SSL certificate validation errors when establishing an HTTPS connection, thereby making the app vulnerable to man-in-the-middle attacks.
54
* @kind problem
5+
* @id java/unsafe-cert-trust
66
* @tags security
77
* external/cwe-273
88
*/
@@ -225,4 +225,5 @@ where
225225
aa instanceof X509TrustAllManagerInit or
226226
aa instanceof SSLEndpointIdentificationNotSet or
227227
aa instanceof RabbitMQEnableHostnameVerificationNotSet
228-
select aa, "Unsafe configuration of trusted certificates"
228+
select aa, "Unsafe configuration of trusted certificates"
229+

0 commit comments

Comments
 (0)