amudusu197052 (Community Member) asked a question.
Team, We have a security issue in veracode on the line: return new TrustManager[] { new X509TrustManager(). The issue reported is "Improper Validation of Certificate with Host Mismatch (CWE ID 297)(1 flaw)"
Description
The failure to validate host-specific certificate data may mean that, while the certificate read was valid, it was not for the site originally requested.
.png){kind=logo}
Can any one respond on below.
Hi @amudusu197052 (Community Member) ,
You can find more information on this here: https://community.veracode.com/s/question/0D52T00004lS3rrSAC/can-any-one-suggest-cwe-id-297-solution-if-you-have-solved-itbelow-is-my-code-snip-where-im-getting-cwe-id-297-issuesslcontext-context-sslcontextgetinstancetlstrustmanager-trustallcerts-new-trustmanager-new-alltrust-
Thank you,
Boy Baukema