Vulnerabilities > Amazon > Amazon WEB Services AWS C IO > 0.10.4

DATE CVE VULNERABILITY TITLE RISK
2021-11-23 CVE-2021-40830 Improper Certificate Validation vulnerability in Amazon products
The AWS IoT Device SDK v2 for Java, Python, C++ and Node.js appends a user supplied Certificate Authority (CA) to the root CAs instead of overriding it on Unix systems.
low complexity
amazon CWE-295
8.8