CVE-2022-25640

creationtimestamp| type| source ---|---|--- 2022-02-24 18:21:42+00:00| seen| https://t.me/cibsecurity/38024 2023-01-17 10:37:08+00:00| seen| https://t.me/techb0ltGenona/3521...

CVE-2022-25640

CVE-2022-25640 affects wolfSSL prior to 5.2.0 where a TLS 1.3 server cannot properly enforce mutual authentication; a client can omit certificate_verify and avoid presenting a certificate. Impact described across sources as enabling bypass of mutual auth during TLS 1.3 handshakes. Affected compon...

CVE-2022-25640

In wolfSSL before 5.2.0, a TLS 1.3 server cannot properly enforce a requirement for mutual authentication. A client can simply omit the certificateverify message from the handshake, and never present a certificate...