Dexidp vulnerabilities
We track 1 vulnerability in Dexidp products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on January 25, 2024.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest Dexidp vulnerabilities
- 7.5 High severity
dex: Inadequate Encryption Strength
Dex is an identity service that uses OpenID Connect to drive authentication for other apps. Dex 2.37.0 serves HTTPS with insecure TLS 1.0 and TLS 1.1. `cmd/dex/serve.go` line 425 seemingly sets TLS 1.2 as minimum version, but the whole `tlsConfig` is ignored a