Strongswan Vpn Client vulnerabilities

1 known vulnerability affecting strongswan/strongswan_vpn_client.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

LOW1

Vulnerabilities

Page 1 of 1

CVE-2015-4171LOWCVSS 2.6≤ 1.4.52015-06-10

CVE-2015-4171 [LOW] CWE-200 CVE-2015-4171: strongSwan 4.3.0 through 5.x before 5.3.2 and strongSwan VPN Client before 1.4.6, when using EAP or strongSwan 4.3.0 through 5.x before 5.3.2 and strongSwan VPN Client before 1.4.6, when using EAP or pre-shared keys for authenticating an IKEv2 connection, does not enforce server authentication restrictions until the entire authentication process is complete, which allows remote servers to obtain credentials by using a valid certificate and then reading

Strongswan Vpn Client vulnerabilities | cvebase