Please note Office visits are by appointment only. We support businesses with 10+ users or workstations, or with servers or cloud services to manage. No residential or walk-in computer repair. Book a time →

Cloudflare Fixes ACME Validation Bug Allowing WAF Bypass to Origin Servers

Written by

Robert Timlick

in

Cloudflare has addressed a security vulnerability impacting its Automatic Certificate Management Environment (ACME) validation logic that made it possible to bypass security controls and access origin servers. 
“The vulnerability was rooted in how our edge network processed requests destined for the ACME HTTP-01 challenge path (/.well-known/acme-challenge/*),” the web infrastructure

More posts