Cortex CloudApplication Security
Webhooks sent over unencrypted channel detected
Rule Details
Cortex AppSec Rule ID
APPSEC_CICD_12
Category
Data Protection
Severity
LOW
Impact
The repository sends events to a webhook over an unencrypted layer. An attacker executing a man-in-the-middle attack can steal or modify the data sent to the webhook.
Recommended Solution - Buildtime
Only use webhooks that support encryption in transit protocols.
Last updated
Was this helpful?