Lucene search
K

4 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 5:19 a.m.1 views

CVE-2023-21242

In isServerCertChainValid of InsecureEapNetworkHandler.java, there is a possible way to trust an imposter server due to a logic error in the code. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

9.8CVSS7.4AI score0.00439EPSS
Exploits0References1
NVD
NVD
added 2023/08/14 9:15 p.m.29 views

CVE-2023-21242

In isServerCertChainValid of InsecureEapNetworkHandler.java, there is a possible way to trust an imposter server due to a logic error in the code. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

9.8CVSS9.4AI score0.00439EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2023/08/14 8:58 p.m.9 views

CVE-2023-21242

In isServerCertChainValid of InsecureEapNetworkHandler.java, there is a possible way to trust an imposter server due to a logic error in the code. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.3AI score0.00439EPSS
Exploits0References2
Cvelist
Cvelist
added 2023/08/14 8:58 p.m.34 views

CVE-2023-21242

In isServerCertChainValid of InsecureEapNetworkHandler.java, there is a possible way to trust an imposter server due to a logic error in the code. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

9.6AI score0.00439EPSS
Exploits0References2
Rows per page
Query Builder