← CVE Intelligence

CVE-2024-6299

Use of a Key Past its Expiration Date in Conduit PUBLISHED

Description (CNA)

Lack of consideration of key expiry when validating signatures in Conduit, allowing an attacker which has compromised an expired key to forge requests as the remote server, as well as PDUs with timestamps past the expiry date

Affected (CNA)

Vendor / productVersions
The Conduit Contributors / Conduitaffected 0 before 0.8.0

CWE

CWE-324

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.