high7.4
CVE-2024-55581
When AdaCore Ada Web Server 25.0.0 is linked with GnuTLS, the default behaviour of AWS.Client is vulnerable to a man-in-the-middle attack because of lack of ve…
Impact
When AdaCore Ada Web Server 25.0.0 is linked with GnuTLS, the default behaviour of AWS.Client is vulnerable to a man-in-the-middle attack because of lack of verification of an HTTPS server's certificate (unless the using program specifies a TLS configuration).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Adacore | Ada Web Server | Version 25.0 |
| Debian | Debian Linux | Version 11.0 |