Lucene search
+L

1 matches found

RedHat Linux
RedHat Linux
added 2020/03/05 11:55 a.m.11 views

openstack-octavia: amphora-agent not requiring client certificate

A certificate-validation error has been found in Octavia's amphora-agent, where an attacker with management-network access could bypass an amphora's client-certificate based authentication. Because the agent's HTTP server gunicorn had 'certreqs' set to 'True' instead of 'ssl.CERTREQUIRED',...

9.1CVSS5.7AI score0.02296EPSS
SaveExploits0References5
Rows per page
Query Builder