CVE-2020-1929 | BDVDB-2026-129129 Detail

ApacheBeam

Description#

The Apache Beam MongoDB connector in versions 2.10.0 to 2.16.0 has an option to disable SSL trust verification. However this configuration is not respected and the certificate verification disables trust verification in every case. This exclusion also gets registered globally which disables trust checking for any code running in the same JVM.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://lists.apache.org/thread.html/rdd0e85b71bf0274471b40fa1396d77f7b2d1165eaea4becbdc69aa04%40%3Cuser.beam.apache.org%3E

Exploit#

No public exploit known

History#

Version 12020-01-15Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.