CPP: Disabled SSL certificate verification

[porcupineyhairs]

Query PR

CPP: Disabled SSL certificate verification

Language

C/C++

CVE(s) ID list

CVE-2022-33684
https://huntr.com/bounties/42325662-6329-4e04-875a-49e2f5d69f78

CWE

CWE-295

Report

Disable SSL certificate verification can expose the communication to MITM attacks.

This PR adds a query to detect the same. This also include the tests and qhelp for the same. This query primarily detects the following pattern

curl_easy_setopt(curl.get(), CURLOPT_SSL_VERIFYPEER, 0);
curl_easy_setopt(curl.get(), CURLOPT_SSL_VERIFYHOST, 0);

This detects two independent issues found in different projects. One of them has a CVE. while the other does not. the databases for the openframework project can be downloaded below.

openframeworksVulnDb.zip

Are you planning to discuss this vulnerability submission publicly? (Blog Post, social networks, etc).

• Yes
• No

Blog post link

No response

[ghsecuritylab]

Your submission is now in status Test run.

For information, the evaluation workflow is the following:
Initial triage > Test run > Results analysis > Query review > Final decision > Pay > Closed

[ghsecuritylab]

Your submission is now in status Results analysis.

For information, the evaluation workflow is the following:
Initial triage > Test run > Results analysis > Query review > Final decision > Pay > Closed

[ghsecuritylab]

Your submission is now in status Query review.

For information, the evaluation workflow is the following:
Initial triage > Test run > Results analysis > Query review > Final decision > Pay > Closed

[p-]

Hey @porcupineyhairs 👋

Could you have a look at the code review?

[porcupineyhairs]

@p- Sorry for the delay in addressing this. I will complete all of the pending PRs including this one over the weekend.

[xcorail]

Created Hackerone report 2736991 for bounty 621415 : [836] CPP: Disabled SSL certificate verification

[xcorail]

Hey @porcupineyhairs don't forget to claim your reward, the program is shutting down soon!