1 result · Clear filters · Feed
-
Medium 6.8
mod_gnutls missing key purpose check in client certificate verification
Mod_gnutls is a TLS module for Apache HTTPD based on GnuTLS. Prior to version 0.13.0, code for client certificate verification did not check the key purpose as set in the Extended Key Usage extension. An attacker with access to the private key for a valid cer…