Skip to content
OpenAdvisories

Vendor

Temporal Technologies

23 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical 9.3

    s2s-proxy accepts untrusted client certificates

    All published s2s-proxy versions through 0.2.2 are affected. In versions 0.1.16 through 0.2.2, TLS server listeners use Go's RequireAnyClientCert mode when skipCAVerification is false. This mode checks that the client holds the certificate's private key but d…