Openntpd
1 CVEs
product
Monthly
OpenNTPD before 6.0p1 does not validate the CN for HTTPS constraint requests, which allows remote attackers to bypass the man-in-the-middle mitigations via a crafted timestamp constraint with a valid. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required.
Authentication Bypass
Openntpd
NVD
CVSS 3.0
5.9
EPSS
0.3%
EPSS 0%
CVSS 5.9
MEDIUM
PATCH
This Month
OpenNTPD before 6.0p1 does not validate the CN for HTTPS constraint requests, which allows remote attackers to bypass the man-in-the-middle mitigations via a crafted timestamp constraint with a valid. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required.
Authentication Bypass
Openntpd
NVD