RSS   Vulnerabilities for 'Strongswan vpn client'   RSS

2015-06-10
 
CVE-2015-4171

 

 
strongSwan 4.3.0 through 5.x before 5.3.2 and strongSwan VPN Client before 1.4.6, when using EAP or pre-shared keys for authenticating an IKEv2 connection, does not enforce server authentication restrictions until the entire authentication process is complete, which allows remote servers to obtain credentials by using a valid certificate and then reading the responses.

 

 >>> Vendor: Strongswan 2 Products
Strongswan
Strongswan vpn client


Copyright 2024, cxsecurity.com

 

Back to Top