Lucene search
+L

1 matches found

RustSec
RustSec
added 2023/03/24 12:0 p.m.20 views

TLS certificate common name validation bypass

The NATS official Rust clients are vulnerable to MitM when using TLS. The common name of the server's TLS certificate is validated against the hostname provided by the server's plaintext INFO message during the initial connection setup phase. A MitM proxy can tamper with the host field's value by...

7AI score
SaveExploits0Affected Software1
Rows per page
Query Builder