Ayms Node-To Improper Certificate Validation Vulnerability

A vulnerability exists in Ayms node-To master branch, where the application improperly validates TLS/SSL certificates. This is achieved by setting 'rejectUnauthorized' to false in the TLS socket options, which can allow man-in-the-middle attackers to spoof servers and intercept sensitive data.

Impact

Exploitation of this vulnerability could lead to man-in-the-middle attacks, allowing interception of sensitive data and server spoofing.