Threats tagged 'ghsa-qqqc-gw7p-pw85'

RouterOS has a vulnerability in its shared certificate validation logic that affects multiple services relying on client and server certificate verification, including OpenVPN, CAPsMAN, and Dot1X. The system uses a shared certificate store trusted by all services, causing scope confusion. This allows any certificate authority in the system-wide trust store to be trusted across different contexts, potentially enabling partial or full authentication bypass in these services.