7 matches found
@grpc/grpc-js: In certain configurations, getAuthContext can return unauthorized certificates as though they were authorized
Impact When server credentials are created with the requireClientCertificate option set to false, getAuthContext does not distinguish between authorized and unauthorized certificates in its return value. This can create improper authentication vulnerabilities for @grpc/grpc-js users who use the...
7.4CVSS5.9AI score0.00208EPSS
SaveExploits0References6Affected Software1
20