The Scalyr Agent before 2.1.10 has Missing SSL Certificate Validation because, in some circumstances, the openssl binary is called without the -verify_hostname option.
CVSS 3.1CRITICAL 9.8·Network·No auth·No interaction·EPSS 0.00951·Published 2020-08-27·Fixed in 2.1.10CWE-295
The Scalyr Agent before 2.1.10 has Missing SSL Certificate Validation because, in some circumstances, native Python code is used that lacks a comparison of the hostname to commonName and subjectAltName.
CVSS 3.1CRITICAL 9.8·Network·No auth·No interaction·EPSS 0.00759·Published 2020-08-27·Fixed in 2.1.10CWE-295
