CVE-2022-4967

Description

strongSwan versions 5.9.2 through 5.9.5 are affected by authorization bypass through improper validation of certificate with host mismatch (CWE-297). When certificates are used to authenticate clients in TLS-based EAP methods, the IKE or EAP identity supplied by a client is not enforced to be contained in the client's certificate. So clients can authenticate with any trusted certificate and claim an arbitrary IKE/EAP identity as their own. This is problematic if the identity is used to make policy decisions. A fix was released in strongSwan version 5.9.6 in August 2022 (e4b4aabc4996fc61c37deab7858d07bc4d220136).

7.7

CVSS

Severity: High

CVSS 3.1 •

EPSS 0.13%

Vendor Advisory strongswan.org

Affected: strongSwan strongSwan

References

Link	Tags
https://github.com/strongswan/strongswan/commit/e4b4aabc4996fc61c37deab7858d07bc4d220136	patch
https://www.strongswan.org/blog/2024/05/13/strongswan-vulnerability-(cve-2022-4967).html	vendor advisory
https://www.cve.org/CVERecord?id=CVE-2022-4967	issue tracking
https://security.netapp.com/advisory/ntap-20240614-0006/

Frequently Asked Questions

What is the severity of CVE-2022-4967?: CVE-2022-4967 has been scored as a high severity vulnerability.
How to fix CVE-2022-4967?: To fix CVE-2022-4967, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2022-4967 being actively exploited in the wild?: As for now, there are no information to confirm that CVE-2022-4967 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
What software or system is affected by CVE-2022-4967?: CVE-2022-4967 affects strongSwan strongSwan.

This platform uses data from the NIST NVD, MITRE CVE, MITRE CWE, First.org and CISA KEV but is not endorsed or certified by these entities. CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site.