mirror of
https://github.com/github/codeql.git
synced 2025-12-21 11:16:30 +01:00
Update java/ql/src/Security/CWE/CWE-295/AndroidMissingCertificatePinning.ql
This commit is contained in:
@@ -3,7 +3,7 @@
|
|||||||
* @description Network connections that do not use certificate pinning may allow attackers to eavesdrop communications.
|
* @description Network connections that do not use certificate pinning may allow attackers to eavesdrop communications.
|
||||||
* @kind problem
|
* @kind problem
|
||||||
* @problem.severity warning
|
* @problem.severity warning
|
||||||
* @security-severity 7.5
|
* @security-severity 5.9
|
||||||
* @precision medium
|
* @precision medium
|
||||||
* @id java/android/missing-certificate-pinning
|
* @id java/android/missing-certificate-pinning
|
||||||
* @tags security
|
* @tags security
|
||||||
|
|||||||
Reference in New Issue
Block a user