Record · corpus.blog/posts/01a08787-e6c2-7296-9f9d-43e654b3b223

Finding Insecure TrustManagers and Disabled Hostname Verification with CodeQL

intrigus.org · published 27 November 2023

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at intrigus.org Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
Links from this post: 22
Words captured: 3,437

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://docs.oracle.com/en/java/javase/21/docs/api/java.base/javax/net/ssl/TrustManager.html

docs.oracle.com

https://docs.oracle.com/en/java/javase/21/docs/api/java.base/javax/net/ssl/HostnameVerifier.html

docs.oracle.com

https://github.com/github/codeql

github.com

Variant analysis of the 'Sequoia' bug Read at the source ↗

pwning.systems

https://codeql.github.com/docs/

codeql.github.com

https://github.com/github/codeql/blob/4f7fde7b879890009a5f955abed0a7e21dee8516/java/ql/src/Security/CWE/CWE-295/InsecureTrustManager.ql

github.com

https://github.com/github/codeql/blob/4f7fde7b879890009a5f955abed0a7e21dee8516/java/ql/lib/semmle/code/java/security/InsecureTrustManager.qll

github.com

https://github.com/github/codeql/blob/4f7fde7b879890009a5f955abed0a7e21dee8516/java/ql/lib/semmle/code/java/security/InsecureTrustManagerQuery.qll

github.com

https://github.com/github/codeql/blob/257fe1ad6b5e8e596ece2306213dcfc340420e2c/java/ql/src/Security/CWE/CWE-297/UnsafeHostnameVerification.ql

github.com

https://github.com/github/codeql/blob/257fe1ad6b5e8e596ece2306213dcfc340420e2c/java/ql/lib/semmle/code/java/security/UnsafeHostnameVerificationQuery.qll

github.com

https://github.com/github/codeql/blob/257fe1ad6b5e8e596ece2306213dcfc340420e2c/java/ql/lib/semmle/code/java/dataflow/ExternalFlow.qll

github.com

https://github.com/github/codeql/tree/257fe1ad6b5e8e596ece2306213dcfc340420e2c/java/ql/lib/ext

github.com

https://groups.google.com/a/mozilla.org/g/dev-security-policy/c/oxX69KFvsm4/m/PKpJf5W6AQAJ

groups.google.com

https://wiki.mozilla.org/CA/Symantec_Issues

wiki.mozilla.org

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0765

cve.mitre.org

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2408

cve.mitre.org

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4763

cve.mitre.org

https://codeql.github.com/codeql-standard-libraries/java/semmle/code/java/Expr.qll/type.Expr$ClassInstanceExpr.html

codeql.github.com

https://codeql.github.com/codeql-standard-libraries/java/semmle/code/java/Expr.qll/predicate.Expr$ConstructorCall$getConstructedType.0.html

codeql.github.com

https://github.com/github/codeql/discussions/14092

github.com

https://en.wikipedia.org/wiki/Basic_block

en.wikipedia.org

https://www.techtarget.com/searchsecurity/news/252527914/Mozilla-Microsoft-drop-Trustcor-as-root-certificate-authority

techtarget.com