strongSwan 4.3.0 through 5.x before 5.3.2 and strongSwan VPN Client before 1.4.6, when using EAP or pre-shared keys for authenticating an IKEv2 connection, does not enforce server authentication restrictions until the entire authentication process is complete, which allows remote servers to obtain credentials by using a valid certificate and then reading the responses.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2015-06-10T18:00:00

Updated: 2024-08-06T06:04:03.021Z

Reserved: 2015-06-02T00:00:00

Link: CVE-2015-4171

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2015-06-10T18:59:09.097

Modified: 2024-11-21T02:30:33.947

Link: CVE-2015-4171

cve-icon Redhat

Severity : Low

Publid Date: 2015-06-08T00:00:00Z

Links: CVE-2015-4171 - Bugzilla