1 matches found
openstack-octavia: amphora-agent not requiring client certificate
A certificate-validation error has been found in Octavia's amphora-agent, where an attacker with management-network access could bypass an amphora's client-certificate based authentication. Because the agent's HTTP server gunicorn had 'certreqs' set to 'True' instead of 'ssl.CERTREQUIRED',...
9.1CVSS5.7AI score0.02296EPSS
SaveExploits0References5
20