Lucene search
Veracode Vulnerability DatabaseVERACODE:25685HistoryJun 16, 2020 - 2:15 a.m.
Authentication Bypass
2020-06-1602:15:44
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
EPSS
0.003
Percentile
71.0%
github.com/caddyserver/caddy is vulnerable to authentication bypass. When TLS is used for client authentication, it does not enforce a tls: StrictHostMatching mode for client authentication, leading to a bypass of TLS authentication.
Related
osv
osv
CVE-2018-21246
2020-06-15 17:15:09
Caddy vulnerable to Authentication Bypass due to mishandling of TLS client authentication
2022-10-06 22:58:56
Authentication bypass in github.com/mholt/caddy
2021-04-14 20:04:52
github
github
cvelist
cvelist
CVE-2018-21246
2020-06-15 16:50:25
nvd
nvd
CVE-2018-21246
2020-06-15 17:15:09
debiancve
debiancve
CVE-2018-21246
2020-06-15 17:15:09
prion
prion
Authentication flaw
2020-06-15 17:15:00
cve
cve
CVE-2018-21246
2020-06-15 17:15:09