1 matches found
Improper Authentication
github.com/smallstep/certificates is vulnerable to improper authentication. The vulnerability is due to missing safeguards against unauthenticated certificate issuance through the SCEP UpdateReq, which allows an attacker to obtain certificates without authentication...
10CVSS6.4AI score0.00296EPSS
SaveExploits0References4Affected Software1
20