ChipokiaTech news, without the noise
← All stories

GoAhead TLS Flaws Allow Revoked Client Certificates and Enable Session Decryption

The GoAhead embedded web server loaded a certificate revocation list into its default TLS backend but never turned revocation checking on, so a revoked client certificate could still pass login on affected setups. The flaw is in builds that use the OpenSSL…

Preview courtesy of The Hacker News. The full article opens on their site.

More from The Hacker News