mirror of
https://github.com/github/codeql.git
synced 2025-12-21 19:26:31 +01:00
Update java/ql/src/Security/CWE/CWE-295/AndroidMissingCertificatePinning.ql
This commit is contained in:
@@ -3,7 +3,7 @@
|
||||
* @description Network connections that do not use certificate pinning may allow attackers to eavesdrop communications.
|
||||
* @kind problem
|
||||
* @problem.severity warning
|
||||
* @security-severity 7.5
|
||||
* @security-severity 5.9
|
||||
* @precision medium
|
||||
* @id java/android/missing-certificate-pinning
|
||||
* @tags security
|
||||
|
||||
Reference in New Issue
Block a user