Lucene search
+L

2 matches found

Vulnrichment
Vulnrichment
•added 2024/06/25 1:02 p.m.•21 views

CVE-2024-6299 Use of a Key Past its Expiration Date in Conduit

Lack of consideration of key expiry when validating signatures in Conduit, allowing an attacker which has compromised an expired key to forge requests as the remote server, as well as PDUs with timestamps past the expiry date...

4.8CVSS7.2AI score0.00161EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/25 12:00 a.m.•7 views

CVE-2024-6299: Use of a Key Past its Expiration Date

Lack of consideration of key expiry when validating signatures in Conduit, allowing an attacker which has compromised an expired key to forge requests as the remote server, as well as PDUs with timestamps past the expiry date...

4.8CVSS5.8AI score0.00161EPSS
SaveExploits0References1
Rows per page
Query Builder