Lucene search

K
cvelistMitreCVELIST:CVE-2015-4171
HistoryJun 10, 2015 - 6:00 p.m.

CVE-2015-4171

2015-06-1018:00:00
mitre
www.cve.org

7.6 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

74.9%

strongSwan 4.3.0 through 5.x before 5.3.2 and strongSwan VPN Client before 1.4.6, when using EAP or pre-shared keys for authenticating an IKEv2 connection, does not enforce server authentication restrictions until the entire authentication process is complete, which allows remote servers to obtain credentials by using a valid certificate and then reading the responses.

7.6 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

74.9%