PT-2018-9417

Name of the Vulnerable Software and Affected Versions mbedTLS version 2.7.0 and earlier Description The issue allows incorrectly signed certificates, specifically accepting ECDSA-signed certificates when only RSA-signed ones should be accepted. This can occur when peers negotiate a TLS-ECDH-RSA-...