CVE-2020-16088

iked in OpenIKED, as used in OpenBSD through 6.7, allows authentication bypass because ca.c has the wrong logic for checking whether a public key matches...

CVE-2020-16088

OpenIKED (used in OpenBSD up to version 6.7) is affected by CVE-2020-16088. The root cause is the ca.c logic that checks whether a public key matches, enabling a bypass of authentication. Impact is a high-severity, network-exposed vulnerability with potential partial confidentiality, integrity, a...