IKEv2 in strongSwan 4.0.7 before 5.1.3 allows remote attackers to bypass authentication by rekeying an IKE_SA during (1) initiation or (2) re-authentication, which triggers the IKE_SA state to be set to established.
References
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2014-04-16T18:00:00
Updated: 2016-11-25T19:57:01
Reserved: 2014-03-12T00:00:00
Link: CVE-2014-2338
JSON object: View
NVD Information
Status : Modified
Published: 2014-04-16T18:37:14.240
Modified: 2016-11-28T19:10:59.523
Link: CVE-2014-2338
JSON object: View
Redhat Information
No data.
CWE