All rules →
Rules / Java
SHIELD-JAVA-014

Trust-All TLS HostnameVerifier

criticalJavaCWE-295CVSS 9.1

What it detects

A HostnameVerifier that returns true unconditionally disables TLS host validation.

How to fix

Remove the custom verifier and rely on the default hostname verification.

Scan your repo freeFull documentation
Back to all rules
SHIELD-JAVA-014: Trust-All TLS HostnameVerifier — Zennoxa Shield