strongswan -- Remote Authentication Bypassentered 2014-05-04
no CVE referenced
CVE details
CVE-2014-2338
IKEv2 in strongSwan 4.0.7 before 5.1.3 allows remote attackers to bypass authentication by rekeying an IKE_SA during (1) initiation or (2) re-authentication, which triggers the IKE_SA state to be set to established.
- Score
- 6.4 medium
- Published
- 2014-04-16
- Links
- NVD · cve.org · Report wrong data
Matched ports (0)
No port is within the affected range.