Vulnerabilities (CVE)

Filtered by vendor Apache Subscribe
Filtered by product Mod-gnutls
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2015-2091 1 Apache 1 Mod-gnutls 2023-12-10 5.0 MEDIUM N/A
The authentication hook (mgs_hook_authz) in mod-gnutls 0.5.10 and earlier does not validate client certificates when "GnuTLSClientVerify require" is set, which allows remote attackers to spoof clients via a crafted certificate.