CVE-2021-46880

x509/x509_verify.c in LibreSSL before 3.4.2, and OpenBSD before 7.0 errata 006, allows authentication bypass because an error for an unverified certif...

Original description

The description as published by the source.

x509/x509_verify.c in LibreSSL before 3.4.2, and OpenBSD before 7.0 errata 006, allows authentication bypass because an error for an unverified certificate chain is sometimes discarded.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory ftp.openbsd.org
advisory security.netapp.com
patch ftp.openbsd.org
patch github.com