1 matches found
Caddy: mTLS client authentication silently fails open when CA certificate file is missing or malformed
Summary Two swallowed errors in ClientAuthentication.provision cause mTLS client certificate authentication to silently fail open when a CA certificate file is missing, unreadable, or malformed. The server starts without error but accepts any client certificate signed by any system-trusted CA,...
9.3CVSS5.5AI score0.00267EPSS
SaveExploits1References7Affected Software1
20