Rami Shaath 0 Posted December 22, 2019 https://winterdragon.ca/global-payments-vulnerability/ Quote On 2019-03-28, Global Payments issued a commit to their SDK that introduced a vulnerability allowing man-in-the-middle attacks due to SSL integrity checking being explicitly disabled. The result of this change allowed all communications between merchants and GlobalPay to be intercepted and unencrypted. the vul appears to be from 2017. Share this post Link to post
