← Back

Mod Gnutls

mod-gnutls

Vendor: Apache • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2015-2091
1Apache
1Mod Gnutls
May 6, 2026
Mar 13, 2015
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The authentication hook (mgs_hook_authz) in mod-gnutls 0.5.10 and earlier does not validate client certificates when "GnuTLSClientVerify require" is set, which allows remote attackers to spoof clients via a crafted certi...Show more
The authentication hook (mgs_hook_authz) in mod-gnutls 0.5.10 and earlier does not validate client certificates when "GnuTLSClientVerify require" is set, which allows remote attackers to spoof clients via a crafted certificate.Show less