mirror of
https://github.com/github/codeql.git
synced 2026-04-25 08:45:14 +02:00
Update java/ql/src/Security/CWE/CWE-295/AndroidMissingCertificatePinning.ql
This commit is contained in:
@@ -3,7 +3,7 @@
|
||||
* @description Network connections that do not use certificate pinning may allow attackers to eavesdrop communications.
|
||||
* @kind problem
|
||||
* @problem.severity warning
|
||||
* @security-severity 7.5
|
||||
* @security-severity 5.9
|
||||
* @precision medium
|
||||
* @id java/android/missing-certificate-pinning
|
||||
* @tags security
|
||||
|
||||
Reference in New Issue
Block a user