Lucene search

K
osvGoogleOSV:CVE-2018-21246
HistoryJun 15, 2020 - 5:15 p.m.

CVE-2018-21246

2020-06-1517:15:09
Google
osv.dev
5

AI Score

7.1

Confidence

Low

EPSS

0.003

Percentile

71.0%

Caddy before 0.10.13 mishandles TLS client authentication, as demonstrated by an authentication bypass caused by the lack of the StrictHostMatching mode.

AI Score

7.1

Confidence

Low

EPSS

0.003

Percentile

71.0%