CVE-2024-55581 — n/a / n/a

Description (CNA)

When AdaCore Ada Web Server 25.0.0 is linked with GnuTLS, the default behaviour of AWS.Client is vulnerable to a man-in-the-middle attack because of lack of verification of an HTTPS server's certificate (unless the using program specifies a TLS configuration).

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

https://docs.adacore.com/corp/security-advisories/SEC.AWS-0056-v1.pdf

ADP enrichment

CISA-ADP

No English description supplied.

https://docs.adacore.com/corp/security-advisories/SEC.AWS-0056-v1.pdf

CVE

No English description supplied.

https://lists.debian.org/debian-lts-announce/2025/03/msg00007.html