GoAhead

Reported Context (3)

A critical vulnerability in the GoAhead embedded web server can allow revoked client certificates to remain valid during mutual TLS authentication, potentially giving previously trusted identities continued access to GoAhead TLS Flaw Lets Revoked Client Certificates Authenticate
Cybersecurity firm FoxIO has disclosed three vulnerabilities in GoAhead’s handling of TLS. Three TLS Flaws in GoAhead Web Server Put Some Device Configurations at Risk
The GoAhead embedded web server loaded a certificate revocation list into its default TLS backend but never turned revocation checking on, so a revoked client certificate could still pass login on affected setups. GoAhead 6.1.1 Fixes TLS Flaws and Login Bypass in Embedded Web Server

CVE (2)

People (2)

MITRE ATT&CK (1)

Vendors (1)

Products (3)

Tools (1)

Industries (4)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.