Authorization Bypass

🗓️ 02 Apr 2023 10:14:48Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 41 Views

Vulnerability in openssl allowing CA to bypass policy check

Reporter	Title	Published	Views	Family All 356
IBM Security Bulletins	Security Bulletin: Vulnerability in NX-OS Firmware used by IBM c-type SAN directors and switches.	28 Mar 202419:47	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities were identified in IBM Security Verify Access.	17 Jan 202415:16	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Rational Build Forge 8.0.0.25 addresses multiple vulnerabilities	24 Nov 202313:49	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar Wincollect is vulnerable to using components with known vulnerabilities	24 Jul 202317:54	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Spectrum Conductor openssl 1.1.1 End of Life	5 Oct 202320:31	–	ibm
IBM Security Bulletins	Security Bulletin: OpenSSL publicly disclosed vulnerabilities affect IBM® MobileFirst Platform	8 Aug 202310:37	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in FOS firmware used by IBM b-type SAN directors and switches.	1 May 202421:19	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Node.js, OpenSSL, trim, and Chalk ansi-regex module might affect IBM Storage Defender – Data Protect	31 Oct 202316:13	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in OpenSSL affects IBM Rational ClearCase.	3 Oct 202314:03	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple OpenSSL vulnerabilities affect IBM Safer Payments	28 Jul 202313:39	–	ibm

Vulners

Node

openssl opensslMatch1.1.1o-r0os

AND

openssl opensslMatch1.1.1p-r0os

AND

openssl opensslMatch1.1.1q-r0os

AND

openssl opensslMatch1.1.1n-r0os

AND

openssl opensslMatch1.1.1s-r0os

AND

openssl opensslMatch1.1.1t-r0os

AND

alpinelinux alpine_linuxMatch3.16

openssl opensslMatch1.1.1q-r0os

AND

openssl opensslMatch1.1.1o-r0os

AND

openssl opensslMatch1.1.1t-r1os

AND

openssl opensslMatch1.1.1t-r0os

AND

openssl opensslMatch1.1.1s-r0os

AND

openssl opensslMatch1.1.1n-r0os

AND

openssl opensslMatch1.1.1l-r0os

AND

openssl opensslMatch1.1.1p-r0os

AND

openssl opensslMatch1.1.1k-r0os

AND

alpinelinux alpine_linuxMatch3.14

openssl1.1-compat openssl1.1-compatMatch1.1.1q-r4os

AND

openssl1.1-compat openssl1.1-compatMatch1.1.1q-r3os

AND

openssl1.1-compat openssl1.1-compatMatch1.1.1s-r0os

AND

openssl1.1-compat openssl1.1-compatMatch1.1.1t-r1os

AND

openssl1.1-compat openssl1.1-compatMatch1.1.1l-r3os

AND

openssl1.1-compat openssl1.1-compatMatch1.1.1l-r4os

AND

openssl1.1-compat openssl1.1-compatMatch1.1.1t-r0os

AND

alpinelinux alpine_linuxMatchedge

openssl3 openssl3Match3.0.0-r3os

AND

openssl3 openssl3Match3.0.3-r0os

AND

openssl3 openssl3Match3.0.7-r0os

AND

openssl3 openssl3Match3.0.2-r0os

AND

openssl3 openssl3Match3.0.8-r1os

AND

openssl3 openssl3Match3.0.5-r0os

AND

openssl3 openssl3Match3.0.5-r1os

AND

openssl3 openssl3Match3.0.8-r0os

AND

openssl3 openssl3Match3.0.0-r4os

AND

alpinelinux alpine_linuxMatch3.15

openssl3 openssl3Match3.0.8-r0os

AND

openssl3 openssl3Match3.0.3-r0os

AND

openssl3 openssl3Match3.0.5-r0os

AND

openssl3 openssl3Match3.0.7-r0os

AND

openssl3 openssl3Match3.0.5-r1os

AND

openssl3 openssl3Match3.0.2-r0os

AND

alpinelinux alpine_linuxMatch3.16

openssl opensslMatch1.1.1l-r8os

AND

openssl opensslMatch1.1.1p-r0os

AND

openssl opensslMatch1.1.1t-r1os

AND

openssl opensslMatch1.1.1s-r1os

AND

openssl opensslMatch1.1.1o-r0os

AND

openssl opensslMatch1.1.1n-r0os

AND

openssl opensslMatch1.1.1q-r0os

AND

openssl opensslMatch1.1.1t-r2os

AND

openssl opensslMatch1.1.1l-r7os

AND

openssl opensslMatch1.1.1l-r5os

AND

alpinelinux alpine_linuxMatch3.15

openssl opensslMatch1.1.1p-r0os

AND

openssl opensslMatch1.1.1l-r5os

AND

openssl opensslMatch1.1.1e-r0os

AND

openssl opensslMatch3.0.7-r1os

AND

openssl opensslMatch3.1.0-r0os

AND

openssl opensslMatch1.1.1g-r0os

AND

openssl opensslMatch1.1.1q-r0os

AND

openssl opensslMatch1.1.1j-r0os

AND

openssl opensslMatch3.0.5-r1os

AND

openssl opensslMatch3.0.5-r2os

AND

openssl opensslMatch1.1.1k-r0os

AND

openssl opensslMatch1.1.1n-r0os

AND

openssl opensslMatch3.0.8-r0os

AND

openssl opensslMatch1.1.1d-r5os

AND

openssl opensslMatch1.1.1f-r0os

AND

openssl opensslMatch1.1.1m-r1os

AND

openssl opensslMatch3.0.7-r2os

AND

openssl opensslMatch3.0.0-r2os

AND

openssl opensslMatch1.1.1m-r3os

AND

openssl opensslMatch1.1.1l-r0os

AND

openssl opensslMatch3.0.5-r3os

AND

openssl opensslMatch3.0.0-r0os

AND

openssl opensslMatch1.1.1m-r2os

AND

openssl opensslMatch1.1.1d-r4os

AND

openssl opensslMatch1.1.1l-r7os

AND

openssl opensslMatch3.0.7-r0os

AND

openssl opensslMatch1.1.1o-r0os

AND

openssl opensslMatch3.1.0-r1os

AND

openssl opensslMatch1.1.1k-r1os

AND

alpinelinux alpine_linuxMatchedge

openssl opensslMatch3.0.8-r0os

AND

openssl opensslMatch3.0.8-r1os

AND

openssl opensslMatch3.0.7-r2os

AND

openssl opensslMatch3.0.7-r0os

AND

openssl opensslMatch3.0.5-r3os

AND

alpinelinux alpine_linuxMatch3.17

openssl1.1-compat openssl1.1-compatMatch1.1.1t-r1os

AND

openssl1.1-compat openssl1.1-compatMatch1.1.1s-r0os

AND

openssl1.1-compat openssl1.1-compatMatch1.1.1t-r0os

AND

openssl1.1-compat openssl1.1-compatMatch1.1.1q-r4os

AND

alpinelinux alpine_linuxMatch3.17

openssl opensslMatch1.1.1h-1debian

AND

debian debian_linuxMatch999

openssl opensslMatch1.1.1d-0+deb10u7debian

AND

openssl opensslMatch1.1.1d-0+deb10u6debian

AND

openssl opensslMatch1.1.1d-0+deb10u4debian

AND

openssl opensslMatch1.1.1d-0+deb10u3debian

AND

debian debian_linuxMatch10

openssl opensslMatch1.1.1k-1debian

AND

openssl opensslMatch1.1.1h-1debian

AND

debian debian_linuxMatch11

openssl opensslMatch1.0.0_20.el6_2.3

openssl opensslMatch1.0.0_4.el6

openssl opensslMatch1.0.1e_42.el6_7.2

openssl opensslMatch1.0.1e_30.el6_6.5

openssl opensslMatch1.0.1e_30.el6_6.4

openssl opensslMatch1.1.1k_4.el8

openssl opensslMatch1.1.1c_2.el8_1.1

openssl opensslMatch1.0.1e_42.ael7b_1.5

openssl opensslMatch1.0.2k_22.el7_9

openssl opensslMatch1.1.1c_15.el8

openssl opensslMatch1.0.1e_42.ael7b_1.9

openssl opensslMatch1.0.1e_30.el6_6.9

openssl opensslMatch1.0.0_20.el6_2.5

openssl opensslMatch1.0.2k_21.el7_9

openssl opensslMatch1.0.1e_42.ael7b_1.8

openssl opensslMatch1.0.0_27.el6_4.2

openssl opensslMatch1.1.1g_12.el8_3

openssl opensslMatch1.0.2k_24.el7_9

openssl opensslMatch1.0.1e_30.el6_6.2

openssl opensslMatch1.0.1e_48.el6

openssl opensslMatch1.0.1e_57.el6

openssl opensslMatch1.0.1e_42.ael7b_1.6

openssl opensslMatch1.0.2k_25.el7_9

openssl opensslMatch1.0.0_4.el6_0.2

openssl opensslMatch1.0.1e_16.el6_5.14

openssl opensslMatch1.0.0_27.el6

openssl opensslMatch1.0.1e_16.el6_5.4

openssl opensslMatch1.0.1e_16.el6_5.7

openssl opensslMatch1.0.0_25.el6_3.1

openssl opensslMatch1.0.1e_16.el6_5.15

openssl opensslMatch1.1.1k_1.el8

openssl opensslMatch1.0.1e_30.el6_6.11

openssl opensslMatch1.0.1e_48.el6_8.1

openssl opensslMatch1.0.1e_16.el6_5.1

openssl opensslMatch1.0.0_4.el6_0.1

openssl opensslMatch1.1.1c_2.el8

openssl opensslMatch1.0.1e_15.el6

openssl opensslMatch1.0.0_20.el6_2.2

openssl opensslMatch1.0.1e_42.el6

openssl opensslMatch1.1.1_8.el8

openssl opensslMatch1.0.1e_16.el6_5

openssl opensslMatch1.1.1k_6.el8

openssl opensslMatch1.0.0_20.el6

openssl opensslMatch1.0.0_10.el6_1.4

openssl opensslMatch1.0.1e_58.el6_10

openssl opensslMatch1.1.1g_9.el8

openssl opensslMatch1.1.1k_5.el8_5

openssl opensslMatch1.0.2k_26.el7_9

openssl opensslMatch1.0.0_20.el6_2.4

openssl opensslMatch1.0.1e_42.el6_7.4

openssl opensslMatch1.0.1e_42.el6_7.1

openssl opensslMatch1.0.0_10.el6

openssl opensslMatch1.0.2k_19.el7

openssl opensslMatch1.0.0_20.el6_2.1

openssl opensslMatch1.0.1e_48.el6_8.3

openssl opensslMatch1.0.0_10.el6_1.5

openssl opensslMatch1.0.1e_30.el6

openssl opensslMatch1.0.1e_30.el6_6.8

openssl opensslMatch1.0.1e_30.el6_6.7

openssl opensslMatch1.0.1e_42.ael7b_1.4

openssl opensslMatch1.1.1g_11.el8

openssl opensslMatch1.0.2k_16.el7_6.1

openssl opensslMatch1.0.1e_48.el6_8.4

openssl opensslMatch1.0.2k_16.el7

openssl opensslMatch1.1.1g_5.el8

openssl opensslMatch1.1.1g_15.el8_3

compat-openssl10 compat-openssl10Match1.0.2o_4.el8

compat-openssl10 compat-openssl10Match1.0.2o_3.el8

ovmf ovmfMatch20180508_3.gitee3198e672e2.el7_6.1

ovmf ovmfMatch20171011_4.git92d07e48907f.el7

ovmf ovmfMatch20180508_6.gitee3198e672e2.el7

ovmf ovmfMatch20180508_3.gitee3198e672e2.el7

ovmf ovmfMatch20150414_2.gitc9e5618.el7

Source	Link
secdb	www.secdb.alpinelinux.org/v3.17/main.yaml
secdb	www.secdb.alpinelinux.org/v3.15/main.yaml
secdb	www.secdb.alpinelinux.org/edge/community.yaml
secdb	www.secdb.alpinelinux.org/v3.14/main.yaml
secdb	www.secdb.alpinelinux.org/v3.17/community.yaml
secdb	www.secdb.alpinelinux.org/edge/main.yaml
secdb	www.secdb.alpinelinux.org/v3.16/main.yaml
git	www.git.openssl.org/gitweb/
git	www.git.openssl.org/gitweb/
git	www.git.openssl.org/gitweb/

18 Feb 2025 23:25Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.15.3

EPSS0.00536

SSVC