Filtered by vendor Apache Subscriptions
Filtered by product Mod-gnutls Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2015-2091 1 Apache 1 Mod-gnutls 2024-11-21 N/A
The authentication hook (mgs_hook_authz) in mod-gnutls 0.5.10 and earlier does not validate client certificates when "GnuTLSClientVerify require" is set, which allows remote attackers to spoof clients via a crafted certificate.