CVE-2012-2388

The GMP Plugin in strongSwan 4.2.0 through 4.6.3 allows remote attackers to bypass authentication via a (1) empty or (2) zeroed RSA signature, aka "RSA signature verification vulnerability."

Published: Jun 27, 2012
Updated: Apr 13, 2023
CVE: CVE-2012-2388
Severity: High
Exploit:

CVSS v2:

Severity: High
Score: 7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P

CWEs:

CWE-287

OWASP TOP 10:

A2 - Broken Authentication

Affected Software
References

Software	From	Fixed in
strongswan / strongswan	4.2.6	4.2.6.x
strongswan / strongswan	4.2.12	4.2.12.x
strongswan / strongswan	4.2.10	4.2.10.x
strongswan / strongswan	4.2.16	4.2.16.x
strongswan / strongswan	4.5.3	4.5.3.x
strongswan / strongswan	4.5.2	4.5.2.x
strongswan / strongswan	4.4.0	4.4.0.x
strongswan / strongswan	4.2.9	4.2.9.x
strongswan / strongswan	4.5.1	4.5.1.x
strongswan / strongswan	4.2.14	4.2.14.x
strongswan / strongswan	4.3.5	4.3.5.x
strongswan / strongswan	4.2.3	4.2.3.x
strongswan / strongswan	4.3.2	4.3.2.x
strongswan / strongswan	4.2.5	4.2.5.x
strongswan / strongswan	4.2.8	4.2.8.x
strongswan / strongswan	4.3.3	4.3.3.x
strongswan / strongswan	4.6.2	4.6.2.x
strongswan / strongswan	4.2.0	4.2.0.x
strongswan / strongswan	4.2.1	4.2.1.x
strongswan / strongswan	4.2.13	4.2.13.x
strongswan / strongswan	4.3.0	4.3.0.x
strongswan / strongswan	4.6.1	4.6.1.x
strongswan / strongswan	4.2.11	4.2.11.x
strongswan / strongswan	4.2.4	4.2.4.x
strongswan / strongswan	4.3.6	4.3.6.x
strongswan / strongswan	4.6.0	4.6.0.x
strongswan / strongswan	4.6.3	4.6.3.x
strongswan / strongswan	4.2.7	4.2.7.x
strongswan / strongswan	4.2.2	4.2.2.x
strongswan / strongswan	4.4.1	4.4.1.x
strongswan / strongswan	4.5.0	4.5.0.x
strongswan / strongswan	4.3.1	4.3.1.x
strongswan / strongswan	4.2.15	4.2.15.x
strongswan / strongswan	4.3.4	4.3.4.x

Vulnerability Database

289,697

CVE-2012-2388