Threats tagged 'ghsa-9hr5-354j-2g3g'

A vulnerability in Linux Foundation Magma up to version 1.9.0 allows remote attackers to bypass authentication by manipulating the X-Magma-Client-Cert-Serial argument. This affects the Obsidian REST component in the file orc8r/cloud/go/services/obsidian/access/operator.go. The vendor has not responded to the disclosure, and no patch information is available.