BitBucket repository webhook SSL verification is disabled

Rule Details

Cortex AppSec Rule ID	APPSEC_CICD_37
Category	Data Protection
Severity	LOW

Impact

SSL Verification is disabled for a repository webhook, which instructs Bitbucket to not verify the identity of the remote server. The lack of verification enables attackers to perform a Man In The Middle attack, and to expose the transmitted data.