Skip to content

Commit 33ba019

Browse files
committed
Go: add CWE tag and @security-severity tag to go/insecure-hostkeycallback
1 parent f09fc7b commit 33ba019

File tree

1 file changed

+2
-0
lines changed

1 file changed

+2
-0
lines changed

go/ql/src/Security/CWE-322/InsecureHostKeyCallback.ql

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -3,9 +3,11 @@
33
* @description Detects insecure SSL client configurations with an implementation of the `HostKeyCallback` that accepts all host keys.
44
* @kind path-problem
55
* @problem.severity warning
6+
* @security-severity 8.2
67
* @precision high
78
* @id go/insecure-hostkeycallback
89
* @tags security
10+
* external/cwe/cwe-322
911
*/
1012

1113
import go

0 commit comments

Comments
 (0)