CVE-2012-4523: Medium severity uninett radsecproxy vulnerability
radsecproxy before 1.6.1 does not properly verify certificates when there are configuration blocks with CA settings that are unrelated to the block being used for verifying the certificate chain, which might allow remote attackers to bypass intended access restrictions and spoof clients.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-4523?
CVE-2012-4523 is considered a high-severity vulnerability due to its ability to allow remote attackers to bypass access restrictions.
How do I fix CVE-2012-4523?
To fix CVE-2012-4523, upgrade to radsecproxy version 1.6.1 or higher where the certificate verification issue has been resolved.
What type of attack is possible with CVE-2012-4523?
CVE-2012-4523 allows remote attackers to spoof clients by bypassing intended access restrictions through improper certificate verification.
Which software versions are affected by CVE-2012-4523?
CVE-2012-4523 affects all versions of Uninett Radsecproxy prior to 1.6.1.
What configurations are impacted by CVE-2012-4523?
CVE-2012-4523 is impacted by configuration blocks with CA settings not related to the block verifying the certificate chain.