Audit
Paramiko
paramiko-exec-command
paramiko-exec-command
Unverified SSL context detected. This will permit insecure connections without verifying SSL certificates. Use ‘ssl.create_default_context()’ instead.
Likelihood: LOW
Confidence: LOW
CWE:
- CWE-78: Improper Neutralization of Special Elements used in an OS Command (‘OS Command Injection’)
OWASP:
- A01:2017 - Injection
- A03:2021 - Injection