- Description
- OpenConnect before 2.25 does not properly validate X.509 certificates, which allows man-in-the-middle attackers to spoof arbitrary AnyConnect SSL VPN servers via a crafted server certificate that (1) does not correspond to the server hostname or (2) is presented in circumstances involving a missing --cafile configuration option.
- Source
- cve@mitre.org
- NVD status
- Modified
CVSS 2.0
- Type
- Primary
- Base score
- 6.4
- Impact score
- 4.9
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:P/I:P/A:N
- nvd@nist.gov
- CWE-20
- Hype score
- Not currently trending
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:infradead:openconnect:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5498A999-5CA0-45ED-B2D2-FA471D24A839",
"versionEndIncluding": "2.22"
},
{
"criteria": "cpe:2.3:a:infradead:openconnect:1.00:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "67DF6A41-F66A-4988-8852-08B0F8409185"
},
{
"criteria": "cpe:2.3:a:infradead:openconnect:1.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "13B5B9C7-3D91-4A40-BEE2-F1BEF2857C4F"
},
{
"criteria": "cpe:2.3:a:infradead:openconnect:1.20:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DFF4C32E-4053-4968-B2E7-C821908B3017"
},
{
"criteria": "cpe:2.3:a:infradead:openconnect:1.30:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "92A36920-3A90-4369-A8F4-515C423BE938"
}
],
"operator": "OR"
}
]
}
]