Skip to content
OpenAdvisories

Vendor

Keploy

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • High 8.6

    Keploy 3.1.0-3.6.25 Unauthenticated TLS Key Exposure

    Keploy versions 3.1.0 through 3.6.25, fixed in 3.6.26, bind the agent control-plane HTTP server to all interfaces without authentication, exposing endpoints that stream TLS session keys and traffic data. Attackers can access the /agent/pcap/keylog endpoint to…