CVE-2022-30629

CVE-2022-30629

Non-random values for ticket_age_add in session tickets in crypto/tls before Go 1.17.11 and Go 1.18.3 allow an attacker that can observe TLS handshakes to correlate successive connections by comparing ticket ages during session resumption.

Source: CVE-2022-30629

답글 남기기

이메일 주소는 공개되지 않습니다. 필수 필드는 *로 표시됩니다