Lucene search
+L

2 matches found

OSV
OSV
added 2026/09/17 5:18 p.m.5 views

GHSA-FJ9W-C36G-H5X8 AsyncHttpClient doesn't verify SCRAM and Digest mutual-authentication responses

Impact For SCRAM, and for Digest with mutual authentication, the client computes the server's verification value the SCRAM ServerSignature, or the Digest rspauth but does not act on the result. If the value is present and does not verify, the client only logs it and still delivers the response to...

3.7CVSS0.00316EPSS
SaveExploits0References6
Rows per page
Query Builder