Authorization Bypass

🗓️ 17 Feb 2021 18:09:26Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 31 Views

openssl vulnerability in SSLv2 negotiation, allowing authorization bypas

Reporter	Title	Published	Views	Family All 92
IBM Security Bulletins	Security Bulletin: Vulnerabilities in OpenSSL affect IBM Rational ClearQuest	29 Jun 202115:25	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM® SDK for Node.js™ in IBM Cloud	11 Mar 202117:48	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Engineering Workflow Management (EWM) vulnerabilities CVE-2021-23839, CVE-2021-23840, CVE-2021-23841	7 Jul 202315:15	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilites affect Engineering Lifecycle Management and IBM Engineering products.	27 Jul 202121:32	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Master Data Management Server vulnerability in OpenSSL	27 Apr 202210:23	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in OpenSSL affect IBM Tivoli Netcool System Service Monitors/Application Service Monitors	14 Jul 202118:41	–	ibm
IBM Security Bulletins	Security Bulletin:Multiple vulnerabilities fixed in IBM Security Verify Bridge - Docker	22 Sep 202122:32	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Aspera Orchestrator affected by OpenSSL vulnerabilities (CVE-2021-23839, CVE-2021-23840, CVE-2021-23841)	2 Feb 202317:00	–	ibm
IBM Security Bulletins	Security Bulletin: WebSphere MQ for HP NonStop Server is affected by multiple OpenSSL vulnerabilities CVE-2021-23839, CVE-2021-23840 and CVE-2021-23841	1 Apr 202117:06	–	ibm
IBM Security Bulletins	Security Bulletin: OpenSSL vulnerabilites impacting Aspera High-Speed Transfer Server, Aspera High-Speed Transfer Endpoint, Aspera Desktop Client 4.0 and earlier (CVE-2021-23839, CVE-2021-23840, CVE-2021-23841)	4 Jun 202101:06	–	ibm

Vulners

Node

openssl opensslMatch1.1.1g-r0os

AND

alpinelinux alpine_linuxMatch3.12

openssl opensslMatch1.1.1g-r0os

AND

openssl opensslMatch1.1.1d-r2os

AND

alpinelinux alpine_linuxMatch3.10

openssl opensslMatch1.1.1d-r3os

AND

openssl opensslMatch1.1.1g-r0os

AND

alpinelinux alpine_linuxMatch3.11

openssl opensslMatch1.1.1g-r0os

AND

alpinelinux alpine_linuxMatch3.9

openssl opensslMatch1.1.1d-r4os

AND

openssl opensslMatch1.1.1d-r5os

AND

openssl opensslMatch1.1.1f-r0os

AND

openssl opensslMatch1.1.1e-r0os

AND

openssl opensslMatch1.1.1g-r0os

AND

alpinelinux alpine_linuxMatchedge

Source	Link
secdb	www.secdb.alpinelinux.org/v3.10/main.yaml
secdb	www.secdb.alpinelinux.org/v3.13/main.yaml
secdb	www.secdb.alpinelinux.org/v3.11/main.yaml
secdb	www.secdb.alpinelinux.org/v3.12/main.yaml
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf
git	www.git.openssl.org/gitweb/
git	www.git.openssl.org/gitweb/
kb	www.kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846
security	www.security.netapp.com/advisory/ntap-20210219-0009/
security	www.security.netapp.com/advisory/ntap-20240621-0006/

21 Jun 2024 20:35Current

3.2Low risk

Vulners AI Score3.2

CVSS 24.3

CVSS 3.13.7

EPSS0.00292

SSVC