Cortex CloudApplication Security
Unmaintained MCP Server is detected in an SCM Repository
Rule Details
Cortex AppSec Rule ID
APPSEC_CICD_359
Category - Subcategory
Pipeline Configuration - 3rd Party Services
Severity
HIGH
Impact
An MCP Server configured in the development environment has not received updates or security patches for more than 180 days. Unmaintained software is vulnerable to known exploits and may contain unpatched CVEs.
PreviousNon-Containerized MCP Server is detected in an SCM Repository
NextArchived or Deprecated MCP Server in use, detected in SCM repository
Last updated
Was this helpful?
