Improper Certificate Validation in blackduck

ALTO 7.5CVE-2020-27589 · GHSA-f248-v4qh-x2r6 · PYSEC-2020-26 · Published 06/11/2020 · updated 17/06/2026

In breve

CVE-2020-27589 è una vulnerabilità ALTO (CVSS 7.5) che riguarda blackduck, hub-rest-api-python (synopsys).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.1%, superiore al 66.3% delle vulnerabilità.
Correzione: aggiornare a 0.0.53 o successiva.

Package	Affected versions	Patched versions
blackduck PyPI	`≥ 0.0.25, < 0.0.53`	`0.0.53`
hub-rest-api-python synopsys	`≥ 0.0.25, ≤ 0.0.52`	No fix yet

Synopsys hub-rest-api-python (aka blackduck on PyPI) version 0.0.25 - 0.0.52 does not validate SSL certificates in certain cases.

NVD description

Synopsys hub-rest-api-python (aka blackduck on PyPI) version 0.0.25 - 0.0.52 does not validate SSL certificates in certain cases.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.