Non évaluée
Caddy before 0.10.13 mishandles TLS client authentication, as demonstrated by an authentication bypass caused by the lack of the StrictHostMatching mo...
CVE-2018-21246
Première détection SecPulse
Description d'origine La description telle que publiée par la source (souvent en anglais).
Caddy before 0.10.13 mishandles TLS client authentication, as demonstrated by an authentication bypass caused by the lack of the StrictHostMatching mode.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory bugs.gentoo.org
- advisory github.com