GoAhead TLS Flaws Allow Revoked Client Certificates and Enable Session Decryption
The GoAhead embedded web server loaded a certificate revocation list into its default TLS backend but never turned revocation checking on, so a revoked client certificate could still pass login on affected setups.…
Sign in with GitHub to write an analysis. It's reviewed before publishing.
🐝 Community analysis
No one has analysed this yet. Be the first. Explain how it happened, who's affected and how defenders should respond.
Headline and excerpt © The Hacker News. CVE Hive links to the original report and doesn't verify third-party reporting. Community analyses are reviewed by the CVE Hive team before publishing.