2 matches found
CVE-2009-5144
mod-gnutls does not validate client certificates when "GnuTLSClientVerify require" is set in a directory context, which allows remote attackers to spoof clients via a crafted certificate...
7.5CVSS7.4AI score0.00843EPSS
SaveExploits0References4
PT-2018-4021
Name of the Vulnerable Software and Affected Versions mod-gnutls affected versions not specified Description The issue concerns the validation of client certificates. When "GnuTLSClientVerify require" is set in a directory context, mod-gnutls fails to validate client certificates, allowing remote...
7.5CVSS0.00843EPSS
SaveExploits0References5
20