CVE-2020-15526

In Redgate SQL Monitor 7.1.4 through 10.1.6 (inclusive), the scope for disabling some TLS security certificate checks can extend beyond that defined by various options on the Configuration > Notifications pages to disable certificate checking for alert notifications. These TLS security checks are also ignored during monitoring of VMware machines. This would make SQL Monitor vulnerable to potential man-in-the-middle attacks when sending alert notification emails, posting to Slack or posting to webhooks. The vulnerability is fixed in version 10.1.7.

• CWE-295

• https://www.red-gate.com/privacy-and-security/vulnerabilities/2020-07-08-sql-monitorVendor Advisory
• https://www.red-gate.com/privacy-and-security/vulnerabilities/2020-07-08-sql-monitorVendor Advisory

Published

Jul 9, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-15518VeeamFSR.sys in Veeam Availability Suite before 10 and Veeam…8.8
• CVE-2020-1552An elevation of privilege vulnerability exists when the Wind…8
• CVE-2020-15521Zoho ManageEngine Applications Manager before 14 build 14730…6.1
• CVE-2020-15522Bouncy Castle BC Java before 1.66, BC C# .NET before 1.8.7, …5.9
• CVE-2020-15523In Python 3.6 through 3.6.10, 3.7 through 3.7.8, 3.8 through…7.8
• CVE-2020-15525GitLab EE 11.3 through 13.1.2 has Incorrect Access Control b…5.3
• CVE-2020-15528An issue was discovered in GOG Galaxy Client 2.0.17. Local e…7.8
• CVE-2020-15529An issue was discovered in GOG Galaxy Client 2.0.17. Local e…7.8
• CVE-2020-1553An elevation of privilege vulnerability exists when the Wind…7.8
• CVE-2020-15530An issue was discovered in Valve Steam Client 2.10.91.91. Th…7.8
• CVE-2020-15531Silicon Labs Bluetooth Low Energy SDK before 2.13.3 has a bu…8.8
• CVE-2020-15532Silicon Labs Bluetooth Low Energy SDK before 2.13.3 has a bu…6.5