The vulnerability of the X509_V_FLAG_X509_STRICT configuration implementation in the OpenSSL library allows a perpetrator to gain unauthorized access to protected information.

🗓️ 06 Apr 2021 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

OpenSSL X509_STRICT flag flaw lets remote attacker bypass certificate validation to access data.

Reporter	Title	Published	Views	Family All 300
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in OpenSSL may affect IBM Workload Scheduler	8 Sep 202109:42	–	ibm
IBM Security Bulletins	Security Bulletin: Cloud Pak for Security has several security vulnerabilities addressed in the latest version	30 Jul 202107:38	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM Application Framework v1 (CentOS6) is End of Life	14 Dec 202120:35	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container may be affected by OpenSSL vulnerabilities (CVE-2021-3449 and CVE-2021-3450)	30 Apr 202113:30	–	ibm
IBM Security Bulletins	Security Bulletin: WebSphere MQ for HP NonStop Server is affected by OpenSSL vulnerabilities (CVE-2021-3449 and CVE-2021-3450)	14 Jun 202114:05	–	ibm
IBM Security Bulletins	Security Bulletin: App Connect Professional & IBM WebSphere Cast Iron Solution are affected by OpenSSL vulnerability	22 Dec 202110:16	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in OpenSSL affect IBM Tivoli Netcool System Service Monitors/Application Service Monitors	14 Jul 202118:41	–	ibm
IBM Security Bulletins	Security Bulletin:Multiple vulnerabilities fixed in IBM Security Verify Bridge - Docker	22 Sep 202122:32	–	ibm
IBM Security Bulletins	Security Bulletin: OpenSSL Vulnerabilities Affect IBM Sterling Connect:Express for UNIX (CVE-2021-3449, CVE-2021-3450)	17 May 202114:30	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in OpenSSL affect IBM Rational ClearQuest (CVE-2021-3449, CVE-2021-3450)	29 Jun 202115:29	–	ibm

Vulners

Node

tenable,nessusRange≤8.13.1

openssl opensslRange1.1.1h–1.1.1j

fedora fedoraMatch34

freebsd freebsdRange12.2–12.2-release-p5

freebsd freebsdRange13–13.0-rc3-p1

Source	Link
openwall	www.openwall.com/lists/oss-security/2021/03/27/1
openwall	www.openwall.com/lists/oss-security/2021/03/27/2
openwall	www.openwall.com/lists/oss-security/2021/03/28/3
openwall	www.openwall.com/lists/oss-security/2021/03/28/4
git	www.git.openssl.org/gitweb/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP/
mta	www.mta.openssl.org/pipermail/openssl-announce/2021-March/000198.html
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-3450
security	www.security.freebsd.org/advisories/FreeBSD-SA-21:07.openssl.asc
security	www.security.gentoo.org/glsa/202103-03

19 Aug 2025 00:00Current

7.3High risk

Vulners AI Score7.3

CVSS 25.8

CVSS 37.4

EPSS0.18339