PT-2021-24075 · Unknown+1 · E2Guardian+1

Patrakov · Published 2021-12-23 · Updated 2023-09-13 · CVE-2021-44273

Positive Technologies (AI Summary)

CVSS v3.1

7.4

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions: e2guardian versions 5.4.x through 5.4.3r

Description: The issue is related to missing SSL certificate validation in the SSL MITM engine of e2guardian. Specifically, when e2guardian is used in standalone mode with SSL MITM enabled and is built with OpenSSL version 1.1.x, it fails to validate hostnames in certificates of the web servers it connects to. This makes e2guardian itself vulnerable to MITM attacks.

Recommendations: For e2guardian versions 5.4.x through 5.4.3r, consider disabling the SSL MITM engine until a patch is available to prevent potential MITM attacks. Restrict access to the SSL MITM engine to minimize the risk of exploitation.

Exploit

Fix

Improper Certificate Validation

Weakness Enumeration

CWE-295

Related Identifiers

CVE-2021-44273

DLA-3564-1

MGASA-2021-0594

Affected Products

Openssl

E2Guardian

References · 16

• 🔥 https://github.com/e2guardian/e2guardian/issues/707 · Exploit
• https://github.com/e2guardian/e2guardian/commit/eae46a7e2a57103aadca903c4a24cca94dc502a2 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2021-44273 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2021-44273 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-3564-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-44273 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-44273 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2021-44273 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2021-44273 · Security Note
• https://advisories.mageia.org/MGASA-2021-0594.html · Security Note
• https://osv.dev/vulnerability/MGASA-2021-0594 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-44273 · Vendor Advisory
• https://lists.debian.org/debian-lts-announce/2023/09/msg00010.html · Note
• https://openwall.com/lists/oss-security/2021/12/23/2 · Note
• http://openwall.com/lists/oss-security/2021/12/23/2 · Note