294 matches found
EUVD-2025-197988
A missing authentication enforcement vulnerability exists in the mutual TLS mTLS implementation used by System REST APIs and SOAP services in multiple WSO2 products. Due to improper validation of client certificate–based authentication in certain default configurations, the affected components ma...
PT-2025-47304
Name of the Vulnerable Software and Affected Versions WSO2 products affected versions not specified Description A missing authentication enforcement issue exists in the mutual TLS mTLS implementation used by System REST APIs and SOAP services. Improper validation of client certificate–based...
PT-2025-47323
Name of the Vulnerable Software and Affected Versions Eclipse Jersey versions 2.45, 3.0.16, 3.1.9 Description A race condition in Eclipse Jersey’s SSL configuration processing can lead to the ignoring of critical SSL configurations, including mutual authentication and custom key/trust stores. Thi...
GHSA-GGP9-C99X-54GP KubeVirt's Improper TLS Certificate Management Handling Allows API Identity Spoofing
Summary Due to improper TLS certificate management, a compromised virt-handler could impersonate virt-api by using its own TLS credentials, allowing it to initiate privileged operations against another virt-handler. Details Give all details on the vulnerability. Pointing to the incriminated sourc...
CVE-2025-55108 BMC Control-M/Agent default configuration does not enforce SSL/TLS allowing unauthorized actions and remote code execution
The Control-M/Agent is vulnerable to unauthenticated remote code execution, arbitrary file read and write and similar unauthorized actions when mutual SSL/TLS authentication is not enabled i.e. in the default configuration. NOTE: The vendor believes that this vulnerability only occurs when...
PT-2025-45096
Name of the Vulnerable Software and Affected Versions BMC Control-M/Agent affected versions not specified Description The Control-M/Agent is susceptible to unauthenticated remote code execution, arbitrary file read and write, and other unauthorized actions when mutual SSL/TLS authentication is no...
Akka.Remote TLS did not properly implement certificate-based authentication
Impact This is a critical network security vulnerability for Akka.Remote users who have SSL / TLS enabled on their Akka.Remote connections and were expecting certificate-based authentication to be enforced on all peers attempting to join the network. In all versions of Akka.Remote from v1.2.0 to...
EUVD-2025-32561
Akka.Remote TLS did not properly implement certificate-based authentication...
CVE-2025-61778
Akka.NET is a .NET port of the Akka project from the Scala / Java community. In all versions of Akka.Remote from v1.2.0 to v1.5.51, TLS could be enabled via our akka.remote.dot-netty.tcp transport and this would correctly enforce private key validation on the server-side of inbound connections...
EUVD-2019-0123
Malware in sbrugna...
EUVD-2019-8895
Malware in sbrugna...
EUVD-2020-9425
Malware in sbrugna...
EUVD-2019-8044
Malware in sbrugna...
CVE-2025-61778 Akka.Remote TLS did not properly implement certificate-based authentication
Akka.NET is a .NET port of the Akka project from the Scala / Java community. In all versions of Akka.Remote from v1.2.0 to v1.5.51, TLS could be enabled via our akka.remote.dot-netty.tcp transport and this would correctly enforce private key validation on the server-side of inbound connections...
CVE-2025-61778 Akka.Remote TLS did not properly implement certificate-based authentication
Akka.NET is a .NET port of the Akka project from the Scala / Java community. In all versions of Akka.Remote from v1.2.0 to v1.5.51, TLS could be enabled via our akka.remote.dot-netty.tcp transport and this would correctly enforce private key validation on the server-side of inbound connections...
CVE-2025-61778 Akka.Remote TLS did not properly implement certificate-based authentication
Akka.NET is a .NET port of the Akka project from the Scala / Java community. In all versions of Akka.Remote from v1.2.0 to v1.5.51, TLS could be enabled via our akka.remote.dot-netty.tcp transport and this would correctly enforce private key validation on the server-side of inbound connections...
PT-2025-40934
Name of the Vulnerable Software and Affected Versions Akka.NET versions 1.2.0 through 1.5.51 Description Akka.NET, a .NET port of the Akka project, has an issue where the Akka.Remote component did not implement mutual TLS mTLS in versions 1.2.0 through 1.5.51. When TLS was enabled via the...
Akka.NET 访问控制错误漏洞
Akka.NET is a distributed concurrent programming framework in the Akka.NET open source. An access control error vulnerability exists in Akka.NET versions 1.2.0 through 1.5.51, which stems from a failure to implement mutual TLS authentication and could lead to unauthorized access...