QID 570068

QID 570068: Operation and Global Level Security Not defined for Operation

Operations should have security schemes defined at the end point level or at the global level. Swagger file was analyzed to check if the operation is protected at operation level and at the global security property. Based on analysis it was determined that security schemes are not defined for the operation.

Not defining security schemes results in making your operation less secure. Swagger specification suggests security scheme definition and an information message is reported. If security scheme is not defined there is no error.

Solution

Make sure that all operations should be protected. Update the swagger definition making sure security schemes are updated with security rules either at the operation level or at the global level.

Vendor References

CVEs related to QID 570068

Software Advisories

Advisory ID	Software	Component	Link

By selecting these links, you may be leaving CVEreport webspace. We have provided these links to other websites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other websites that are more appropriate for your purpose. CVEreport does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, CVEreport does not endorse any commercial products that may be mentioned on these sites. Please address comments about any linked pages to [email protected].