Lucene search
Veracode Vulnerability DatabaseVERACODE:30706HistoryMay 27, 2021 - 6:04 a.m.
Insecure Certificate Validation
2021-05-2706:04:45
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
0.001 Low
EPSS
Percentile
38.8%
github.com/pion/webrtc is using an insecure certificate validation. A failed DTLS certificate verification does not fail data channel communication during PeerConnection handshake. The attack requires the attacker to have knowledge of the ICE password.
| CPE | Name | Operator | Version |
|---|---|---|---|
| github.com/pion/webrtc | le | 3.0.14 | |
| github.com/pion/webrtc | le | 3.0.14 |
Related
cve
cve
CVE-2021-28681
2021-03-18 04:15:14
nvd
nvd
CVE-2021-28681
2021-03-18 04:15:14
osv
osv
In github.com/pion/webrtc, failed DTLS certificate verification doesn't stop data channel communication
2021-05-25 18:42:42
Authorization bypass in github.com/pion/webrtc/v3
2021-07-28 18:08:05
CVE-2021-28681
2021-03-18 04:15:14
github
github
prion
prion
Code injection
2021-03-18 04:15:00
cvelist
cvelist
CVE-2021-28681
2021-03-18 03:20:06