Actions
SecOps #1415
open
CD
[Sécurité] Vulnérabilité de code : internal/rest/client/http_client.go:82 (problem-based-packs.insecure-transport.go-stdlib.bypass-tls-verification.bypass-tls-verification)
SecOps #1415:
[Sécurité] Vulnérabilité de code : internal/rest/client/http_client.go:82 (problem-based-packs.insecure-transport.go-stdlib.bypass-tls-verification.bypass-tls-verification)
Status:
Submitted
Priority:
Normal
Assignee:
-
Start date:
07/15/2026
Due date:
% Done:
0%
Estimated time:
spec_ref:
build_status:
build_number:
ci_run_url:
scan_status:
scan_report_url:
deploy_status:
preprod_url:
deployed_at:
branch:
pr_url:
security_key:
internal/rest/client/http_client.go:82_problem-based-packs.insecure-transport.go-stdlib.bypass-tls-verification.bypass-tls-verification
severity:
medium
paused:
Description
**Sévérité** : MEDIUM
**Source** : Semgrep
`vuln-medium`
**Emplacement** : internal/rest/client/http_client.go:82
**Règle** : problem-based-packs.insecure-transport.go-stdlib.bypass-tls-verification.bypass-tls-verification
Checks for disabling of TLS/SSL certificate verification. This should only be used for debugging purposes because it leads to vulnerability to MTM attacks.
### Extrait de code
```
requires login
```
### Lien CVE
https://stackoverflow.com/questions/12122159/how-to-do-a-https-request-with-bad-certificate
Actions