Oldpec

**Name of the Vulnerable Software and Affected Versions** Heartland & Global Payments PHP SDK versions prior to 2.0.0 **Description** The issue concerns the failure to enforce SSL certificate validations in the Gateways/Gateway.php file. This could potentially lead to security risks, as it may allow for man-in-the-middle attacks or other types of exploitation. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited. **Recommendations** For versions prior to 2.0.0, update to version 2.0.0 or later to resolve the issue. As a temporary workaround, consider disabling the use of the Gateways/Gateway.php file until a patch is available. Restrict access to sensitive data handled by this file to minimize the risk of exploitation.