Authentication Bypass

🗓️ 13 Feb 2025 05:24:14Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 6 Views

OpenSSL vulnerable to Authentication Bypass allowing unauthenticated connections due to handshake failure.

Reporter	Title	Published	Views	Family All 146
IBM Security Bulletins	Security Bulletin: IBM SOAR QRadar Plugin App is vulnerable to using components with known vulnerabilities	16 Apr 202514:34	–	ibm
IBM Security Bulletins	Security Bulletin: A denial-of-service attack, TE.CL request smuggling, a man-in-the-middle attack, and other vulnerabilities might affect IBM Storage Defender - Resiliency Service	16 Apr 202516:15	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security vulnerabilities affecting IBM Knowledge Catalog Premium Cartridge	11 Mar 202619:05	–	ibm
IBM Security Bulletins	Security Bulletin: Storage Virtualize Ansible Collection is affected by a vulnerability in the cryptography package	9 Jun 202510:44	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container UBI updates	26 Mar 202518:00	–	ibm
IBM Security Bulletins	Security Bulletin: There is a vulnerability in cryptography-44.0.0-cp39-abi3-manylinux_2_28_x86_64.whl used by IBM Maximo Manage application in IBM Maximo Application Suite (CVE-2024-12797)	25 Apr 202506:55	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security QRadar EDR Software contains multiple vulnerabilities	20 May 202521:07	–	ibm
IBM Security Bulletins	Security Bulletin: There are multiple vulnerabilities that can affect IBM Fusion HCI and IBM Fusion HCI for watsonx	31 May 202514:07	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in cryptography-44.0.0-cp37-abi3-macosx_10_9_universal2.whl	26 Aug 202517:49	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite uses cryptography-44.0.0-cp39-abi3-manylinux_2_28_x86_64.whl which is vulnerable to CVE-2024-12797.	30 May 202513:25	–	ibm

Vulners

Node

openssl opensslMatch3.2.1-r1python

AND

openssl opensslMatch3.1.0-r5python

AND

openssl opensslMatch1.1.1e-r0python

AND

openssl opensslMatch3.3.1-r1python

AND

openssl opensslMatch3.3.2-r0python

AND

openssl opensslMatch3.3.1-r0python

AND

openssl opensslMatch3.3.1-r2python

AND

openssl opensslMatch1.1.1l-r7python

AND

openssl opensslMatch3.3.2-r2python

AND

openssl opensslMatch3.2.1-r0python

AND

openssl opensslMatch3.1.4-r0python

AND

openssl opensslMatch1.1.1q-r0python

AND

openssl opensslMatch3.0.0-r0python

AND

openssl opensslMatch3.1.0-r3python

AND

openssl opensslMatch3.0.5-r1python

AND

openssl opensslMatch3.0.7-r1python

AND

openssl opensslMatch3.3.1-r3python

AND

openssl opensslMatch3.1.0-r0python

AND

openssl opensslMatch3.1.4-r1python

AND

openssl opensslMatch1.1.1l-r0python

AND

openssl opensslMatch3.0.7-r2python

AND

openssl opensslMatch3.1.3-r0python

AND

openssl opensslMatch1.1.1n-r0python

AND

openssl opensslMatch3.3.0-r1python

AND

openssl opensslMatch1.1.1k-r1python

AND

openssl opensslMatch3.3.0-r2python

AND

openssl opensslMatch3.1.5-r5python

AND

openssl opensslMatch1.1.1o-r0python

AND

openssl opensslMatch1.1.1j-r0python

AND

openssl opensslMatch3.0.5-r2python

AND

openssl opensslMatch3.0.8-r0python

AND

openssl opensslMatch3.1.1-r3python

AND

openssl opensslMatch3.3.2-r3python

AND

openssl opensslMatch3.1.1-r2python

AND

openssl opensslMatch3.1.4-r2python

AND

openssl opensslMatch3.3.2-r5python

AND

openssl opensslMatch3.3.2-r4python

AND

openssl opensslMatch1.1.1m-r3python

AND

openssl opensslMatch1.1.1d-r4python

AND

openssl opensslMatch3.1.2-r0python

AND

openssl opensslMatch3.0.0-r2python

AND

openssl opensslMatch3.3.0-r0python

AND

openssl opensslMatch1.1.1f-r0python

AND

openssl opensslMatch1.1.1m-r1python

AND

openssl opensslMatch1.1.1m-r2python

AND

openssl opensslMatch3.1.0-r2python

AND

openssl opensslMatch3.0.7-r0python

AND

openssl opensslMatch3.1.1-r1python

AND

openssl opensslMatch3.1.0-r1python

AND

openssl opensslMatch1.1.1k-r0python

AND

openssl opensslMatch3.3.2-r1python

AND

openssl opensslMatch1.1.1l-r5python

AND

openssl opensslMatch3.0.5-r3python

AND

openssl opensslMatch1.1.1g-r0python

AND

openssl opensslMatch1.1.1d-r5python

AND

openssl opensslMatch3.1.0-r4python

AND

openssl opensslMatch1.1.1p-r0python

AND

alpinelinux alpine_linuxMatchedge

openssl opensslMatch3.3.2-r3python

AND

openssl opensslMatch3.3.2-r5python

AND

openssl opensslMatch3.3.2-r4python

AND

alpinelinux alpine_linuxMatch3.21

openssl opensslMatch3.3.1-r0python

AND

openssl opensslMatch3.3.0-r1python

AND

openssl opensslMatch3.3.1-r3python

AND

openssl opensslMatch3.3.1-r1python

AND

openssl opensslMatch3.3.0-r2python

AND

openssl opensslMatch3.3.2-r2python

AND

openssl opensslMatch3.3.2-r0python

AND

openssl opensslMatch3.3.2-r1python

AND

alpinelinux alpine_linuxMatch3.20

openssl opensslMatch1.1.1h-1debian

AND

debian debian_linuxMatch999

cryptography cryptographyRange42.0.0–44.0.0python

cryptography cryptographyMatch42.0.0python

cryptography cryptographyMatch42.0.1python

cryptography cryptographyMatch42.0.2python

cryptography cryptographyMatch42.0.3python

cryptography cryptographyMatch42.0.4python

cryptography cryptographyMatch42.0.5python

cryptography cryptographyMatch42.0.6python

cryptography cryptographyMatch42.0.7python

cryptography cryptographyMatch42.0.8python

cryptography cryptographyMatch43.0.0python

cryptography cryptographyMatch43.0.1python

cryptography cryptographyMatch43.0.3python

Source	Link
github	www.github.com/pyca/cryptography/security/advisories/GHSA-79v4-65xg-pq4g
openwall	www.openwall.com/lists/oss-security/2025/02/11/3
github	www.github.com/openssl/openssl/commit/738d4f9fdeaad57660dcba50a619fafced3fd5e9
openwall	www.openwall.com/lists/oss-security/2025/02/11/4
openssl-library	www.openssl-library.org/news/secadv/20250211.txt
github	www.github.com/openssl/openssl/commit/798779d43494549b611233f92652f0da5328fbe7
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-12797
github	www.github.com/openssl/openssl/commit/87ebd203feffcf92ad5889df92f90bb0ee10a699
github	www.github.com/pyca/cryptography

13 Dec 2025 07:33Current

6.6Medium risk

Vulners AI Score6.6

CVSS 3.16.3

EPSS0.00804

SSVC