CVE-2020-13777: TLS 1.3 session resumption works without master key, allowing MITM (#1011) · Issues · gnutls / GnuTLS · GitLab

CVE-2020-13777: TLS 1.3 session resumption works without master key, allowing MITM GnuTLS servers are able to use tickets issued by each other without access to the secret key as generated by gnutls_session_ticket_key_generate(). This allows a MITM server without valid credentials to resume sessions with a client that first established an initial connection with a server with valid credentials. Th

[jovi0608]

先週出ていたGnuTLSの脆弱性(CVE-2020-13777)は、なかなか痺れるものだったか。master keyが初期化されたままTLS ticketを送っていたのでMITMが可能になっていたと。