1 matches found
Improper Authentication
github.com/smallstep/certificates is vulnerable to improper authentication. The vulnerability is due to missing safeguards against unauthenticated certificate issuance through the SCEP UpdateReq, which allows an attacker to obtain certificates without authentication...
10CVSS7.1AI score0.00308EPSS
SaveExploits0References4Affected Software1
20