Page 13 of 121 results (0.004 seconds)

CVSS: 5.9EPSS: 0%CPEs: 8EXPL: 0

07 Oct 2014 — crpyto/tls in Go 1.1 before 1.3.2, when SessionTicketsDisabled is enabled, allows man-in-the-middle attackers to spoof clients via unspecified vectors. crpyto/tls en Go 1.1 anterior a 1.3.2, cuando SessionTicketsDisabled está habilitado, permite a atacantes man-in-the-middle falsificar clientes através de vectores no especificados. • http://www.openwall.com/lists/oss-security/2014/09/26/28 • CWE-264: Permissions, Privileges, and Access Controls •