Vulnerability in Strongswan
CVE-2022-4967
strongSwan versions 5.9.2 through 5.9.5 are affected by authorization bypass through improper validation of certificate with host mismatch (CWE-297). When certificates are used to authenticate clients in TLS-based EAP methods, the IKE or EAP identity supplied by a client is not enforced to be contained in the client's certificate. So clients can authenticate with any trusted certificate and claim an arbitrary IKE/EAP identity as their own. This is problematic if the identity is used to make policy decisions. A fix was released in strongSwan version 5.9.6 in August 2022 (e4b4aabc4996fc61c37deab7858d07bc4d220136).
Published · last modified .
CVSS v3 metric
CVSS v3 base score 7.7 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N.
EPSS exploit prediction
EPSS: 0.005 (38.1th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 38th percentile — 38.1% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.005 · newest: 0.005 · change: 0.000
Affected products
- Strongswan — versions 5.9.2
Weakness classification (CWE)
References
- github.com/strongswan/strongswan/commit/e4b4aabc4996fc61c37deab7858d07bc4d220136 (Patch, patch)
- www.strongswan.org/blog/2024/05/13/strongswan-vulnerability-(cve-2022-4967).html (vendor-advisory, Mitigation, Vendor Advisory)
- www.cve.org/CVERecord (issue-tracking, Third Party Advisory)
- security.netapp.com/advisory/ntap-20240614-0006/ (Third Party Advisory)
Frequently asked questions
- What is CVE-2022-4967?
- CVE-2022-4967 is a high-severity vulnerability in Strongswan, classified under Improper Validation of Certificate with Host Mismatch. CVSS score: 7.7/10. Published 2024-05-14.
- How severe is CVE-2022-4967?
- High severity. CVSS v3 base score is 7.7 out of 10.