Lucene search
+L

1 matches found

OSV
OSV
added 2022/07/29 10:24 p.m.16 views

GHSA-2CPX-6PQP-WF35 fs2-io skips mTLS client verification

Impact When establishing a server-mode TLSSocket using fs2-io on Node.js, the parameter requestCert = true is ignored, peer certificate verification is skipped, and the connection proceeds. The vulnerability is limited to: 1. fs2-io running on Node.js. The JVM TLS implementation is completely...

9.8CVSS5.9AI score0.00771EPSS
SaveExploits1References7
Rows per page
Query Builder