Stormshield Sslvpn vulnerabilities

CVE-2022-4304 [MEDIUM] CWE-203 CVE-2022-4304: A timing based side channel exists in the OpenSSL RSA Decryption implementation which could be suffi A timing based side channel exists in the OpenSSL RSA Decryption implementation which could be sufficient to recover a plaintext across a network in a Bleichenbacher style attack. To achieve a successful decryption an attacker would have to be able to send a very large number of trial messages for decryption. The vulnerability affects all RSA padding