ARM mbed TLS before 1.3.21 and 2.x before 2.1.9, if optional authentication is configured, allows remote attackers to bypass peer authentication via an X.509 certificate chain with many intermediates. NOTE: although mbed TLS was formerly known as PolarSSL, the releases shipped with the PolarSSL name are not affected.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2017-08-30T20:00:00
Updated: 2024-08-05T19:13:41.938Z
Reserved: 2017-08-30T00:00:00
Link: CVE-2017-14032
Vulnrichment
No data.
NVD
Status : Modified
Published: 2017-08-30T20:29:00.337
Modified: 2024-11-21T03:12:01.000
Link: CVE-2017-14032
Redhat
No data.