CVE-2019-12496: Improper Certificate Validation

May 31, 2019

An issue was discovered in Hybrid Group Gobot. The mqtt subsystem skips verification of root CA certificates by default.

References

nvd.nist.gov/vuln/detail/CVE-2019-12496

Detect and mitigate CVE-2019-12496 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →