Vendor
Temporal Technologies
23 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
Critical 9.3
s2s-proxy accepts untrusted client certificates
All published s2s-proxy versions through 0.2.2 are affected. In versions 0.1.16 through 0.2.2, TLS server listeners use Go's RequireAnyClientCert mode when skipCAVerification is false. This mode checks that the client holds the certificate's private key but d…