Поиск уязвимостей
Количество 10
Количество 10
GHSA-4qm7-rm85-wr68
The server implementation of the EAP-MSCHAPv2 protocol in the eap-mschapv2 plugin in strongSwan 4.2.12 through 5.x before 5.3.4 does not properly validate local state, which allows remote attackers to bypass authentication via an empty Success message in response to an initial Challenge message.
CVE-2015-8023
The server implementation of the EAP-MSCHAPv2 protocol in the eap-mschapv2 plugin in strongSwan 4.2.12 through 5.x before 5.3.4 does not properly validate local state, which allows remote attackers to bypass authentication via an empty Success message in response to an initial Challenge message.
CVE-2015-8023
The server implementation of the EAP-MSCHAPv2 protocol in the eap-mschapv2 plugin in strongSwan 4.2.12 through 5.x before 5.3.4 does not properly validate local state, which allows remote attackers to bypass authentication via an empty Success message in response to an initial Challenge message.
CVE-2015-8023
The server implementation of the EAP-MSCHAPv2 protocol in the eap-mschapv2 plugin in strongSwan 4.2.12 through 5.x before 5.3.4 does not properly validate local state, which allows remote attackers to bypass authentication via an empty Success message in response to an initial Challenge message.
CVE-2015-8023
The server implementation of the EAP-MSCHAPv2 protocol in the eap-msch ...
openSUSE-SU-2015:2103-1
Security update for strongswan
SUSE-SU-2015:2186-1
Security update for strongswan
SUSE-SU-2015:2183-2
Security update for strongswan
SUSE-SU-2015:2183-1
Security update for strongswan
ALT-PU-2015-2000
ALT-PU-2015-2000: package `strongswan` update to version 5.3.4-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-4qm7-rm85-wr68 The server implementation of the EAP-MSCHAPv2 protocol in the eap-mschapv2 plugin in strongSwan 4.2.12 through 5.x before 5.3.4 does not properly validate local state, which allows remote attackers to bypass authentication via an empty Success message in response to an initial Challenge message. | 3% Низкий | больше 4 лет назад | |
 | CVE-2015-8023 The server implementation of the EAP-MSCHAPv2 protocol in the eap-mschapv2 plugin in strongSwan 4.2.12 through 5.x before 5.3.4 does not properly validate local state, which allows remote attackers to bypass authentication via an empty Success message in response to an initial Challenge message. | CVSS2: 5 | 3% Низкий | почти 11 лет назад |
 | CVE-2015-8023 The server implementation of the EAP-MSCHAPv2 protocol in the eap-mschapv2 plugin in strongSwan 4.2.12 through 5.x before 5.3.4 does not properly validate local state, which allows remote attackers to bypass authentication via an empty Success message in response to an initial Challenge message. | CVSS2: 6.4 | 3% Низкий | почти 11 лет назад |
 | CVE-2015-8023 The server implementation of the EAP-MSCHAPv2 protocol in the eap-mschapv2 plugin in strongSwan 4.2.12 through 5.x before 5.3.4 does not properly validate local state, which allows remote attackers to bypass authentication via an empty Success message in response to an initial Challenge message. | CVSS2: 5 | 3% Низкий | почти 11 лет назад |
| CVE-2015-8023 The server implementation of the EAP-MSCHAPv2 protocol in the eap-msch ... | CVSS2: 5 | 3% Низкий | почти 11 лет назад |
 | openSUSE-SU-2015:2103-1 Security update for strongswan | 3% Низкий | почти 11 лет назад | |
| SUSE-SU-2015:2186-1 Security update for strongswan | 3% Низкий | почти 11 лет назад | |
| SUSE-SU-2015:2183-2 Security update for strongswan | 3% Низкий | почти 11 лет назад | |
| SUSE-SU-2015:2183-1 Security update for strongswan | 3% Низкий | почти 11 лет назад | |
| ALT-PU-2015-2000 ALT-PU-2015-2000: package `strongswan` update to version 5.3.4-alt1 | CVSS2: 5 | 3% Низкий | почти 11 лет назад |
Уязвимостей на страницу