TLS certificate check bypass cURL with mbedTLS - (CVE-2024-2466)

CVEs

6.5 Medium Severity

PoC video

libcurl with mbedTLS skips TLS certificate checks for IP address connections, bypassing security for all TLS protocols (HTTPS, FTPS, IMAPS, etc.).

Tags

@Smartkeyss

31 posts

I am just curious 😊 I use simple words to explain complicated things.

Total vcoins

87.9K

Comments (0)