VariantDraft
CWE-593Authentication Bypass: OpenSSL CTX Object Modified after SSL Objects are Created
Category: auth
Description
The product modifies the SSL context after connection creation has begun.
If the program modifies the SSL_CTX object after creating SSL objects from it, there is the possibility that older SSL objects created from the original context could all be affected by that change.
Common consequences· 2
- Access Control — Bypass Protection MechanismNo authentication takes place in this process, bypassing an assumed protection of encryption.
- Confidentiality — Read Application DataThe encrypted communication between a user and a trusted host may be subject to a sniffing attack.
Potential mitigations· 3
- [Architecture and Design]Use a language or a library that provides a cryptography framework at a higher level of abstraction.
- [Implementation]Most SSL_CTX functions have SSL counterparts that act on SSL-type objects.
- [Implementation]Applications should set up an SSL_CTX completely, before creating SSL objects from it.
Related CAPEC attack patterns· 1
References
Exploits (incoming)1
| Type | Target | Confidence | Tier |
|---|---|---|---|
| AttackPattern | Adversary in the Middle (AiTM)capec-94 | 100% | live |
Related by meaning· 6
Nearest entities by semantic similarity across the cs-graph corpus.