CVE-2024-23674

The Online-Ausweis-Funktion eID scheme in the German National Identity card (through version 2024-02-15) is vulnerable to authentication bypass via spoofing, a flaw known as sPACE (Spoofing Password Authenticated Connection Establishment). A man-in-the-middle attacker can assume a victim's identi...

German National Identity card security breach

The German National Identity card is an authentication mechanism and carrier. A security vulnerability exists in the German National Identity card Online-Ausweis-Funktion eID that originates from allowing authentication to be bypassed through spoofing...