CVE-2020-15688

The HTTP Digest Authentication in the GoAhead web server before 5.1.2 does not completely protect against replay attacks

published July 23, 2020

CVSS
—
EPSS
4%
Percentile
90.6
In the wild
Unconfirmed
What it is

The HTTP Digest Authentication in the GoAhead web server before 5.1.2 does not completely protect against replay attacks. This allows an unauthenticated remote attacker to bypass authentication via capture-replay if TLS is not used to protect the underlying communication channel.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04039 · 90.6th percentile
Published
2020-07-23T12:32Z
EPSS history
Timeline
  • 23 JUL 12:32Z
    The HTTP Digest Authentication in the GoAhead web server before 5.1.2 does not completely protect against replay attacks
    cvelistv5