Summary The function X509_VERIFY_PARAM_add0_policy() is documented to implicitly enable the certificate policy check when doing certificate verification. However, the implementation of the function do...
Summary OpenSSL is vulnerable to carefully crafted malicious X.509 certificate chains that include policy constraints. This triggers an exponential use of computational resources, leading to a denial-...
Summary When RemoteIpFilter is used with requests received from a reverse proxy via HTTP with the X-Forwarded-Proto header set to https, some versions of Apache Tomcat did not include the secure attri...
SamPirok
on:
Security Advisory: SA-2022-004 – Spring Framework
