Логотип exploitDog
bind:CVE-2022-25640
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2022-25640

Количество 4

Количество 4

ubuntu логотип

CVE-2022-25640

почти 4 года назад

In wolfSSL before 5.2.0, a TLS 1.3 server cannot properly enforce a requirement for mutual authentication. A client can simply omit the certificate_verify message from the handshake, and never present a certificate.

CVSS3: 7.5
EPSS: Низкий
nvd логотип

CVE-2022-25640

почти 4 года назад

In wolfSSL before 5.2.0, a TLS 1.3 server cannot properly enforce a requirement for mutual authentication. A client can simply omit the certificate_verify message from the handshake, and never present a certificate.

CVSS3: 7.5
EPSS: Низкий
debian логотип

CVE-2022-25640

почти 4 года назад

In wolfSSL before 5.2.0, a TLS 1.3 server cannot properly enforce a re ...

CVSS3: 7.5
EPSS: Низкий
github логотип

GHSA-wx9x-cpp6-2q3w

почти 4 года назад

In wolfSSL before 5.2.0, a TLS 1.3 server cannot properly enforce a requirement for mutual authentication. A client can simply omit the certificate_verify message from the handshake, and never present a certificate.

CVSS3: 7.5
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2022-25640

In wolfSSL before 5.2.0, a TLS 1.3 server cannot properly enforce a requirement for mutual authentication. A client can simply omit the certificate_verify message from the handshake, and never present a certificate.

CVSS3: 7.5
5%
Низкий
почти 4 года назад
nvd логотип
CVE-2022-25640

In wolfSSL before 5.2.0, a TLS 1.3 server cannot properly enforce a requirement for mutual authentication. A client can simply omit the certificate_verify message from the handshake, and never present a certificate.

CVSS3: 7.5
5%
Низкий
почти 4 года назад
debian логотип
CVE-2022-25640

In wolfSSL before 5.2.0, a TLS 1.3 server cannot properly enforce a re ...

CVSS3: 7.5
5%
Низкий
почти 4 года назад
github логотип
GHSA-wx9x-cpp6-2q3w

In wolfSSL before 5.2.0, a TLS 1.3 server cannot properly enforce a requirement for mutual authentication. A client can simply omit the certificate_verify message from the handshake, and never present a certificate.

CVSS3: 7.5
5%
Низкий
почти 4 года назад

Уязвимостей на страницу