Description
The HTTP Digest Authentication in the GoAhead web server before 5.1.2 does not completely protect against replay attacks. This allows an unauthenticated remote attacker to bypass authentication via capture-replay if TLS is not used to protect the underlying communication channel.
Advisories 1
- ICSA-23-129-02 Hitachi Energy MSM CISA ICS & IT advisories · May 10, 2023