Lucene search

K
freebsdFreeBSD3EB0CCC2-8C6A-11E5-8519-005056AC623E
HistoryNov 16, 2015 - 12:00 a.m.

strongswan -- authentication bypass vulnerability in the eap-mschapv2 plugin

2015-11-1600:00:00
vuxml.freebsd.org
7

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.005 Low

EPSS

Percentile

76.9%

Strongswan Release Notes reports:

Fixed an authentication bypass vulnerability in the eap-mschapv2 plugin that
was caused by insufficient verification of the internal state when handling
MSCHAPv2 Success messages received by the client.
This vulnerability has been registered as CVE-2015-8023.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchstrongswan< 5.3.4UNKNOWN

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.005 Low

EPSS

Percentile

76.9%

Related for 3EB0CCC2-8C6A-11E5-8519-005056AC623E