GoAhead Web Server Vulnerability Allows Revoked TLS Client Certificates to Pass Authentication

A vulnerability was discovered in the GoAhead embedded web server affecting its TLS implementation with OpenSSL. The system loads a certificate revocation…

If your infrastructure runs GoAhead with mutual TLS and OpenSSL, verify whether revoked certificates could still be considered valid. Look for vendor updates that enable revocation checking by default, and in the interim consider implementing additional certificate validation controls at the application layer.