FreeRDP: FreeRDP: Authentication bypass via incorrect RDSTLS PDU handling

A vulnerability in FreeRDP's server-side RDSTLS allows remote, unauthenticated attackers to bypass authentication. By sending a crafted capabilities PDU instead of the expected authentication request, an attacker can gain an authenticated session without valid credentials...