Lucene search

CVE-2021-3450

🗓️ 25 Mar 2021 15:13:15Reported by opensslType

cve🔗 web.nvd.nist.gov📰️ 73 Media mentions👁 512 Views

The X509_V_FLAG_X509_STRICT flag in OpenSSL 1.1.1h through 1.1.1j allows bypass of certificate chain check

5 of 5AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 195
Cvelist	CVE-2021-3450 CA certificate check bypass with X509_V_FLAG_X509_STRICT	25 Mar 202114:25	–	cvelist
OpenSSL	Vulnerability in OpenSSL - CA certificate check bypass with X509_V_FLAG_X509_STRICT	25 Mar 202100:00	–	openssl
Microsoft CVE	OpenSSL: CVE-2021-3450 CA certificate check bypass with X509_V_FLAG_X509_STRICT	12 Oct 202107:00	–	mscve
OpenVAS	Tenable Nessus Agent 8.2.1 - 8.2.3 Third-Party Vulnerability (TNS-2021-08)	9 Apr 202100:00	–	openvas
OpenVAS	OpenSSL: CA Certificate Check Bypass Vulnerability (CVE-2021-3450) - Linux	26 Mar 202100:00	–	openvas
OpenVAS	OpenSSL: CA Certificate Check Bypass Vulnerability (CVE-2021-3450) - Windows	26 Mar 202100:00	–	openvas
OpenVAS	Fedora: Security Advisory for openssl (FEDORA-2021-cbf14ab8f9)	2 Apr 202100:00	–	openvas
OpenVAS	Tenable Nessus <= 8.13.1 Multiple Third-party Vulnerabilities (TNS-2021-05)	7 Apr 202100:00	–	openvas
OpenVAS	Mageia: Security Advisory (MGASA-2021-0176)	28 Jan 202200:00	–	openvas
OpenVAS	Fedora: Security Advisory for openssl (FEDORA-2021-cbf14ab8f9)	2 Apr 202100:00	–	openvas

Nvd

Vulners

Node

openssl opensslRange1.1.1h–1.1.1k

Node

freebsd freebsdMatch12.2-

freebsd freebsdMatch12.2p1

freebsd freebsdMatch12.2p2

Node

netapp santricity_smi-s_provider_firmwareMatch-

AND

netapp santricity_smi-s_providerMatch-

Node

netapp storagegrid_firmwareMatch-

AND

netapp storagegridMatch-

Node

windriver linuxMatch-cd

windriver linuxMatch17.0lts

windriver linuxMatch18.0lts

windriver linuxMatch19.0lts

Node

netapp cloud_volumes_ontap_mediatorMatch-

netapp oncommand_workflow_automationMatch-

netapp ontap_select_deploy_administration_utilityMatch-

netapp storagegridMatch-

Node

fedoraproject fedoraMatch34

Node

tenable nessusRange≤8.13.1

tenable nessus_agentRange8.2.1–8.2.3

tenable nessus_network_monitorMatch5.11.0

tenable nessus_network_monitorMatch5.11.1

tenable nessus_network_monitorMatch5.12.0

tenable nessus_network_monitorMatch5.12.1

tenable nessus_network_monitorMatch5.13.0

Node

oracle commerce_guided_searchMatch11.3.2

oracle enterprise_manager_for_storage_managementMatch13.4.0.0

oracle graalvmMatch19.3.5enterprise

oracle graalvmMatch20.3.1.2enterprise

oracle graalvmMatch21.0.0.2enterprise

oracle jd_edwards_enterpriseone_toolsRange<9.2.6.0

oracle jd_edwards_world_securityMatcha9.4

oracle mysql_connectorsRange≤8.0.23

oracle mysql_enterprise_monitorRange≤8.0.23

oracle mysql_serverRange≤5.7.33

oracle mysql_serverRange8.0.15–8.0.23

oracle mysql_workbenchRange≤8.0.23

oracle peoplesoft_enterprise_peopletoolsRange8.57–8.59

oracle secure_backupRange<18.1.0.1.0

oracle secure_global_desktopMatch5.6

oracle weblogic_serverMatch12.2.1.4.0

oracle weblogic_serverMatch14.1.1.0.0

Node

mcafee web_gatewayMatch8.2.19

mcafee web_gatewayMatch9.2.10

mcafee web_gatewayMatch10.1.1

mcafee web_gateway_cloud_serviceMatch8.2.19

mcafee web_gateway_cloud_serviceMatch9.2.10

mcafee web_gateway_cloud_serviceMatch10.1.1

Node

sonicwall sma100_firmwareRange<10.2.1.0-17sv

AND

sonicwall sma100Match-

Node

sonicwall capture_clientRange<3.6.24

sonicwall email_securityRange<10.0.11

sonicwall sonicosRange≤7.0.1-r1456

Node

nodejs node.jsRange10.0.0–10.24.1-

nodejs node.jsRange12.0.0–12.22.1-

nodejs node.jsRange14.0.0–14.16.1-

nodejs node.jsRange15.0.0–15.14.0-

[
  {
    "product": "OpenSSL",
    "vendor": "OpenSSL",
    "versions": [
      {
        "status": "affected",
        "version": "Fixed in OpenSSL 1.1.1k (Affected 1.1.1h-1.1.1j)"
      }
    ]
  }
]

Source	Link
openwall	www.openwall.com/lists/oss-security/2021/03/28/4
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf
openwall	www.openwall.com/lists/oss-security/2021/03/28/3
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-openssl-2021-GHY28dJd
tenable	www.tenable.com/security/tns-2021-09
security	www.security.freebsd.org/advisories/FreeBSD-SA-21:07.openssl.asc
oracle	www.oracle.com/security-alerts/cpujul2022.html
oracle	www.oracle.com/security-alerts/cpuapr2022.html
oracle	www.oracle.com//security-alerts/cpujul2021.html
mta	www.mta.openssl.org/pipermail/openssl-announce/2021-March/000198.html

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

25 Mar 2021 15:15Current

7.6High risk

Vulners AI Score7.6

CVSS25.8

CVSS37.4

EPSS0.00416

CWE-295