Beveiligingsadvies

CVE-2017-14032

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2017-08-30 20:00:00
Laatst bijgewerkt 2024-08-05 19:13:41
Toegewezen door mitre
CVSS-score geen score
Status PUBLISHED

Beschrijving

ARM mbed TLS before 1.3.21 and 2.x before 2.1.9, if optional authentication is configured, allows remote attackers to bypass peer authentication via an X.509 certificate chain with many intermediates. NOTE: although mbed TLS was formerly known as PolarSSL, the releases shipped with the PolarSSL name are not affected.