Lucene search
+L

1 matches found

RedHat Linux
RedHat Linux
added 2020/06/22 6:47 a.m.8 views

gnutls: session resumption works without master key allowing MITM

A flaw was found in GnuTLS, in versions starting from 3.6.4, where it does not session the ticket encryption key in a secure fashion by the application which is connecting. This flaw allows an attacker to craft a man-in-the-middle-attack, with the ability to bypass the TLS1.3 authentication and...

7.4CVSS7.1AI score0.17507EPSS
SaveExploits3References5
Rows per page
Query Builder