OpenSSL patched high-severity flaw CVE-2024-12797

OpenSSL patched a high-severity vulnerability, CVE-2024-12797, that allowed man-in-the-middle attacks on TLS connections using raw public keys. The vulnerability, discovered by Apple, impacted OpenSSL 3.2, 3.3, and 3.4 and was fixed in versions 3.2.4, 3.3.2, and 3.4.1. This vulnerability highlights the importance of secure communication protocols and regular software updates.

*****
Written on