crpyto/tls in Go 1.1 before 1.3.2, when SessionTicketsDisabled is enabled, allows man-in-the-middle attackers to spoof clients via unspecified vectors.
CVSS Score
4.3
EPSS Score
0.003
Published
2014-10-07
Page 15