CVE-2021-46880
x509/x509_verify.c in LibreSSL before 3.4.2, and OpenBSD before 7.0 errata 006, allows authentication bypass because an error for an unverified certif...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
x509/x509_verify.c in LibreSSL before 3.4.2, and OpenBSD before 7.0 errata 006, allows authentication bypass because an error for an unverified certificate chain is sometimes discarded.
Références
- advisory ftp.openbsd.org
- advisory security.netapp.com
- patch ftp.openbsd.org
- patch github.com