Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:35639
HistoryMay 23, 2022 - 4:28 a.m.

Improper Certificate Validation

2022-05-2304:28:43
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
14
pion/dtls improper validation flight4parse vulnerability

EPSS

0.001

Percentile

31.1%

github.com/pion/dtls is vulnerable to improper certificate validation. The vulnerability exists because the flight4Parse function of flight4handler.go accepts client certificates without verifying them.

EPSS

0.001

Percentile

31.1%