Cortex CloudApplication Security
Azure Pipelines commands transmit data over an unencrypted channel
Rule Details
Cortex AppSec Rule ID
APPSEC_CICD_195
Category
Data Protection
Severity
MEDIUM
Impact
Pipeline commands transmitting data over an unencrypted layer such as HTTP allow attackers to perform a man-in-the-middle attack to intercept, tamper with and/or steal information, to possibly run code in the build system and to reach the production environment.
Last updated
Was this helpful?
