Home / Vulnerability Database / Python : Unsafe SSL configuration
Python
Python : Unsafe SSL configuration
Classification
OWASP Top 10 2013
OWASP Top 10 2017
OWASP MASVS
HIPAA
Overview
SSL connection uses insecure settings. The established connection is insecure and can cause a compromise of valuable data.
In python applications constants that denote the protocol version is used to set the parameters of SSL connection. Many versions suits are insecure or obsolete. Some secure protocol versions:
- PROTOCOL_TLSv1_2
- PROTOCOL_TLSv1_1
MEDIUM
DerScanner Severity Score
Do you want to fix Python : Unsafe SSL configuration in your application?
See also
Python
Python : Debug mode on
Python
Python : Web3: Deprecated method
Python