Showing 1 vulnerability on this page for cortex

Signals CISA KEV Ransomware Nuclei
linuxfoundation vulnerability results
VulnerabilityTitle and contextCVSSEPSSPoCsSignalsSTIX action

cortex establishes TLS connections with `InsecureSkipVerify` set to `true`

A TLS certificate verification issue discovered in cortex v0.42.1 allows attackers to obtain sensitive information via the makeOperatorRequest function.

CWE-599Aug 1, 2024
CVSS-v4.0EPSS0.258%PoCs0SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templatesSTIX