Skip to content

Commit

Permalink
Apply suggestions from code review
Browse files Browse the repository at this point in the history
Co-authored-by: Hendrik Buchwald <64110887+hendrik-buchwald-sonarsource@users.noreply.github.com>
  • Loading branch information
1 parent 3dd4f05 commit 05c8437
Showing 1 changed file with 4 additions and 4 deletions.
8 changes: 4 additions & 4 deletions rules/S7140/secrets/rule.adoc
Original file line number Diff line number Diff line change
Expand Up @@ -9,8 +9,8 @@ If an attacker gains access to an SSLMate secret, they might be able to gain acc

=== What is the potential impact?

SSLMate provide API used by organizations to issue and monitor SSL/TLS certificates.
These certificate garanty the authenticity of the organization's servers and the confidentiality of the data exchanged with it.
SSLMate provides APIs used by organizations to issue and monitor SSL/TLS certificates.
These certificates guaranty the authenticity of the organization's servers, and the confidentiality of the data exchanged with them.
Depending on the permission granted to the API key, an attacker could potentially create, revoke, or modify SSL/TLS certificates of the organization.

Creating certificates would allow attackers to impersonate the organization's servers. This leads to Man-In-The-Middle attacks that would
Expand All @@ -21,8 +21,8 @@ to that server.

include::../../../shared_content/secrets/fix/revoke.adoc[]

Also revoke certificate that were issues since the leak. Doing so
will ensure that all people and assets that rely on this certificate for security
Also, revoke certificates that were issued since the leak. Doing so
will ensure that all people and assets that rely on these certificates for security
operations are aware of its compromise and stop trusting it.

include::../../../shared_content/secrets/fix/recent_use.adoc[]
Expand Down

0 comments on commit 05c8437

Please sign in to comment.