Cortex CloudApplication Security
GitLab CI pipeline commands transmit data over an unencrypted channel
Rule Details
Cortex AppSec Rule ID
APPSEC_CICD_122
Category
Data Protection
Severity
MEDIUM
Impact
Pipeline commands transmitting data over an unencrypted layer such as HTTP allow attackers to perform a man-in-the-middle attack to intercept, tamper with and/or steal information, to possibly run code in the build system and to reach the production environment.
PreviousCertificate not verified by GitLab CI pipeline command
NextForking of private repositories in the organization is allowed
Last updated
Was this helpful?
