Insecure Certificate Validation

2021-10-1308:29:10

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

globalpayments

php-sdk

insecure certificate validation

sendrequest function

ssl certificate validations

EPSS

0.003

Percentile

69.1%

JSON

globalpayments/php-sdk is vulnerable to insecure certificate validation. The vulnerability exists in the sendRequest function in Gateway.php as it does not properly enforce the SSL certificate validations.

References

github.com/globalpayments/php-sdk/commit/a73f8039b213ce6888df1f12e93fc3264d920f2e

github.com/globalpayments/php-sdk/compare/1.3.3...2.0.0

github.com/globalpayments/php-sdk/pull/8

github.com/globalpayments/php-sdk/releases/tag/2.0.0

winterdragon.ca/global-payments-vulnerability/

EPSS

0.003

Percentile

69.1%

JSON

Related for VERACODE:32481