{"id":"CVE-2020-24714","aliases":["EUVD-2020-0177","GHSA-w6xv-mf6f-r5f6","PYSEC-2020-251"],"status":"published","title":"Scalyr Agent Missing SSL Certificate Validation","description":"The Scalyr Agent before 2.1.10 has Missing SSL Certificate Validation because, in some circumstances, the openssl binary is called without the -verify_hostname option.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.00951,"percentile":0.61579,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-295"],"published":"2020-08-27T21:52:29Z","modified":"2026-10-24T10:30:25Z","fixes":[{"ecosystem":"PyPI","package":"scalyr-agent-2","fixed_in":["2.1.10"],"sources":["ghsa","osv"]}],"affected":[{"source":"ghsa","ecosystem":"PyPI","package":"scalyr-agent-2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.10"}]}]},{"source":"osv","ecosystem":"PyPI","package":"scalyr-agent-2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.10"}]}],"versions":["2.0.0.alpha.11","2.0.0.beta.3","2.0.1","2.0.14","2.0.15","2.0.17","2.0.2","2.0.27","2.0.37","2.0.38","2.0.39","2.0.4.1","2.0.4.2","2.0.40","2.0.41","2.0.42","2.0.43","2.0.44","2.0.45","2.0.46","2.0.47","2.0.48","2.0.49","2.0.5","2.0.50","2.0.51","2.0.52","2.0.53","2.0.54","2.0.55","2.0.56","2.0.57","2.0.58","2.0.59","2.0.6","2.0.8","2.1.1","2.1.2","2.1.3","2.1.4","2.1.5","2.1.6","2.1.7","2.1.8","2.1.9"]},{"source":"osv","ecosystem":"PyPI","package":"scalyr-agent-2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.10"}]}],"versions":["2.0.0.alpha.11","2.0.0.beta.3","2.0.1","2.0.14","2.0.15","2.0.17","2.0.2","2.0.27","2.0.37","2.0.38","2.0.39","2.0.4.1","2.0.4.2","2.0.40","2.0.41","2.0.42","2.0.43","2.0.44","2.0.45","2.0.46","2.0.47","2.0.48","2.0.49","2.0.5","2.0.50","2.0.51","2.0.52","2.0.53","2.0.54","2.0.55","2.0.56","2.0.57","2.0.58","2.0.59","2.0.6","2.0.8","2.1.1","2.1.2","2.1.3","2.1.4","2.1.5","2.1.6","2.1.7","2.1.8","2.1.9"]}],"products":[{"vendor":"scalyr","product":"scalyr_agent"}],"references":[{"url":"https://scalyr-static.s3.amazonaws.com/technical-details/index.html","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","evidence","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-24714","tags":["advisory"]},{"url":"https://github.com/scalyr/scalyr-agent-2/commit/96d5f5bec734c7a0e7c64654cdb7aacc81fdc867","tags":["web"]},{"url":"https://github.com/scalyr/scalyr-agent-2/blob/96d5f5bec734c7a0e7c64654cdb7aacc81fdc867/CHANGELOG.md","tags":["web"]},{"url":"https://github.com/pypa/advisory-database/tree/main/vulns/scalyr-agent-2/PYSEC-2020-251.yaml","tags":["web"]},{"url":"https://github.com/advisories/GHSA-w6xv-mf6f-r5f6","tags":["advisory"]},{"url":"https://github.com/scalyr/scalyr-agent-2","tags":["package"]}],"sources":{"cve":[{"id":"CVE-2020-24714","description":"The Scalyr Agent before 2.1.10 has Missing SSL Certificate Validation because, in some circumstances, the openssl binary is called without the -verify_hostname option.","status":"published","published":"2020-08-27T21:52:29Z","modified":"2024-08-04T15:19:09.366Z","updated_at":"2026-11-02T14:35:54.468882Z"}],"euvd":[{"id":"EUVD-2020-0177","description":"The Scalyr Agent before 2.1.10 has Missing SSL Certificate Validation because, in some circumstances, the openssl binary is called without the -verify_hostname option.","status":"published","published":"2020-08-27T21:52:29Z","modified":"2024-08-04T15:19:09Z","updated_at":"2026-11-03T03:07:19.775117Z"}],"ghsa":[{"id":"GHSA-w6xv-mf6f-r5f6","title":"Scalyr Agent Missing SSL Certificate Validation","description":"The Scalyr Agent before 2.1.10 has Missing SSL Certificate Validation because, in some circumstances, the openssl binary is called without the -verify_hostname option.","status":"published","published":"2022-05-24T17:26:55Z","modified":"2024-10-22T17:23:31Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-295"],"updated_at":"2026-11-02T14:38:12.325695Z"}],"nvd":[{"id":"CVE-2020-24714","description":"The Scalyr Agent before 2.1.10 has Missing SSL Certificate Validation because, in some circumstances, the openssl binary is called without the -verify_hostname option.","status":"published","published":"2020-08-27T22:15:09.957Z","modified":"2026-06-17T03:06:01.43Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-295"],"updated_at":"2026-11-02T14:06:13.600965Z"}],"osv":[{"id":"CVE-2020-24714","description":"The Scalyr Agent before 2.1.10 has Missing SSL Certificate Validation because, in some circumstances, the openssl binary is called without the -verify_hostname option.","status":"published","published":"2020-08-27T22:15:09.957Z","modified":"2026-10-24T10:30:25.300207064Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:44:15.879068Z"},{"id":"GHSA-w6xv-mf6f-r5f6","title":"Scalyr Agent Missing SSL Certificate Validation","description":"The Scalyr Agent before 2.1.10 has Missing SSL Certificate Validation because, in some circumstances, the openssl binary is called without the -verify_hostname option.","status":"published","published":"2022-05-24T17:26:55Z","modified":"2024-10-22T18:03:24.857543Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-295"],"updated_at":"2026-11-02T15:46:58.401149Z"},{"id":"PYSEC-2020-251","description":"The Scalyr Agent before 2.1.10 has Missing SSL Certificate Validation because, in some circumstances, the openssl binary is called without the -verify_hostname option.","status":"published","published":"2020-08-27T22:15:00Z","modified":"2026-06-10T17:02:41.355922753Z","updated_at":"2026-11-02T15:52:52.192131Z"}]}}