The vulnerability of the AES-SIV encryption algorithm in the OpenSSL library allows a hacker to bypass the authentication process.

🗓️ 29 Aug 2023 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

OpenSSL AES SIV vulnerability enables remote authentication bypass.

Reporter	Title	Published	Views	Family All 129
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to multiple Operator package issues	30 Nov 202318:45	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise is vulnerable to a remote attacker due to OpenSSL	10 Oct 202312:14	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in OpenSSL affects IBM Rational ClearCase	13 Mar 202414:30	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in OpenSSL affect AIX	11 Sep 202317:03	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in OpenSSH and OpenSSL affect IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products	15 Apr 202503:54	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container operands are vulnerable to security restrictions bypass	26 Oct 202311:29	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in OpenSSL affect IBM Rational ClearQuest	14 Mar 202405:26	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a security restrictions bypass in OpenSSL [CVE-2023-2975]	30 Nov 202319:04	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Planning Analytics Local - Planning Analytics Workspace is affected by vulnerabilities in multiple Open Source Software (OSS) components	7 May 202419:21	–	ibm
FreeBSD	OpenSSL -- AES-SIV implementation ignores empty associated data entries	14 Jul 202300:00	–	freebsd

Vulners

Node

novell suse_manager_retail_branch_serverMatch4.3

novell suse_manager_proxyMatch4.3

novell suse_manager_serverMatch4.3

openssl opensslRange3.0.0–3.0.9

openssl opensslRange3.1.0–3.1.1

project_harbor harborMatch2.7.0

node.js node.jsRange≤18.17.0

camunda_services_gmbh camunda_modelerMatch5.15.1

novell opensuse_leapMatch15.5

novell opensuse_leapMatch15.4

canonical ubuntuMatch23.04

canonical ubuntuMatch23.10

Source	Link
openwall	www.openwall.com/lists/oss-security/2023/07/15/1
openwall	www.openwall.com/lists/oss-security/2023/07/19/5
git	www.git.openssl.org/gitweb/
git	www.git.openssl.org/gitweb/
security	www.security.netapp.com/advisory/ntap-20230725-0004/
openssl	www.openssl.org/news/secadv/20230714.txt
vuldb	www.vuldb.com/ru/
cybersecurity-help	www.cybersecurity-help.cz/vdb/SB2023071506
repo	www.repo.red-soft.ru/redos/7.3c/x86_64/updates/
security-tracker	www.security-tracker.debian.org/tracker/CVE-2023-2975

15 Apr 2024 00:00Current

6.6Medium risk

Vulners AI Score6.6

CVSS 25

CVSS 35.3

EPSS0.00525