CVE-2026-30795
RustDesk HTTP Client Silently Accepts Invalid TLS Certificates After Handshake Failure
概要
RustDesk HTTP Client Silently Accepts Invalid TLS Certificates After Handshake Failure
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Cleartext Transmission of Sensitive Information vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android (Heartbeat sync loop modules) allows Sniffing Attacks. This vulnerability is associated with program files src/hbbs_http/sync.Rs and program routines Heartbeat JSON payload construction (preset-address-book-password).
This issue affects RustDesk Client: through 1.4.5.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- advisory vulsec.org
- package github.com
- package github.com
- report docs.google.com
- web github.com