CVE-2014-2338

IKEv2 in strongSwan 4.0.7 before 5.1.3 allows remote attackers to bypass authentication by rekeying an IKE_SA during (1) initiation or (2) re-authentication…

published April 16, 2014

CVSS
—
EPSS
2%
Percentile
83.8
In the wild
Unconfirmed
What it is

IKEv2 in strongSwan 4.0.7 before 5.1.3 allows remote attackers to bypass authentication by rekeying an IKE_SA during (1) initiation or (2) re-authentication, which triggers the IKE_SA state to be set to established.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02381 · 83.8th percentile
Published
2014-04-16T18:00Z
EPSS history
Timeline
  • 16 APR 18:00Z
    IKEv2 in strongSwan 4.0.7 before 5.1.3 allows remote attackers to bypass authentication by rekeying an IKE_SA during (1) initiation or (2) re-authentication…
    cvelistv5