PT-2012-6362 · Strongswan+1 · Strongswan+1
Published
1970-01-01
·
Updated
2024-06-15
·
CVE-2012-2388
CVSS v2.0
7.5
High
| Vector | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
strongSwan versions 4.2.0 through 4.6.3
Description
The issue allows remote attackers to bypass authentication via an empty or zeroed RSA signature, potentially leading to a violation of confidentiality, integrity, and availability of protected information. This can be exploited remotely.
Recommendations
For strongSwan versions 4.2.0 through 4.6.3, update to a version outside of this range to resolve the issue.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Improper Authentication
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Suse
Strongswan