Lucene search

K
redhatcveRedhat.comRH:CVE-2016-7141
HistoryOct 08, 2019 - 10:52 a.m.

CVE-2016-7141

2019-10-0810:52:46
redhat.com
access.redhat.com
12

0.004 Low

EPSS

Percentile

72.2%

It was found that the libcurl library using the NSS (Network Security Services) library as TLS/SSL backend incorrectly re-used client certificates for subsequent TLS connections in certain cases. An attacker could potentially use this flaw to hijack the authentication of the connection by leveraging a previously created connection with a different client certificate.