CVE-2021-46880

x509/x509_verify.c in LibreSSL before 3.4.2, and OpenBSD before 7.0 errata 006, allows authentication bypass because an error for an unverified certif...

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

x509/x509_verify.c in LibreSSL before 3.4.2, and OpenBSD before 7.0 errata 006, allows authentication bypass because an error for an unverified certificate chain is sometimes discarded.

出典: OSV.dev (Open Source Vulnerabilities) NVD OSV

参照URL

advisory ftp.openbsd.org
advisory security.netapp.com
patch ftp.openbsd.org
patch github.com