Improper Authentication

Overview Affected versions of this package are vulnerable to Improper Authentication due to OCSP handling in the OpenSSL Panama OpenSSLEngine. An attacker can authenticate with a client certificate that is not checked through OCSP by presenting a certificate with no usable OCSP responder URL to a...