crypto/x509: golang: crypto/x509: Man-in-the-middle attacks via untrusted intermediate certificates

A flaw was found in Go's crypto/x509 package. The certificate verification process fails to block trust in intermediate certificates associated with a compromised Certificate Authority CA. A remote attacker presenting a certificate signed by these intermediate authorities can impersonate legitima...