AIKIDO-2025-10231
aws-advanced-jdbc-wrapper is vulnerable to Insecure Default Variable Initialization
15
Low Risk
This Affects:
aws-advanced-jdbc-wrapperTL;DR
Affected versions of this package are vulnerable due to an unsafe default value for the SSL Insecure parameter, which disables server certificate verification during SAML assertion workflows. This can expose applications to man-in-the-middle attacks. The parameter should default to false to ensure secure SSL connections.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range.
Background info
aws-advanced-jdbc-wrapper is vulnerable to Insecure Default Variable Initialization in versions 2.3.2 - 2.5.5.
How to fix this
Upgrade the software.amazon.jdbc:aws-advanced-jdbc-wrapper library to the patch version and/or set sslInsecure to false.
Get Secure Now
Secure your code, cloud, and runtime environments in one central system. Find and fix vulnerabilities automatically.
No credit card required | Scan results in 32secs.
SOC 2Compliant
ISO 27001Compliant