VariantDraft

CWE-593Authentication Bypass: OpenSSL CTX Object Modified after SSL Objects are Created

Category: auth

Description

The product modifies the SSL context after connection creation has begun. If the program modifies the SSL_CTX object after creating SSL objects from it, there is the possibility that older SSL objects created from the original context could all be affected by that change.

Common consequences· 2

  • Access Control — Bypass Protection Mechanism
    No authentication takes place in this process, bypassing an assumed protection of encryption.
  • Confidentiality — Read Application Data
    The encrypted communication between a user and a trusted host may be subject to a sniffing attack.

Potential mitigations· 3

  • [Architecture and Design]Use a language or a library that provides a cryptography framework at a higher level of abstraction.
  • [Implementation]Most SSL_CTX functions have SSL counterparts that act on SSL-type objects.
  • [Implementation]Applications should set up an SSL_CTX completely, before creating SSL objects from it.

Related CAPEC attack patterns· 1

CAPEC-94

References

  1. https://cwe.mitre.org/data/definitions/593.html

Exploits (incoming)1

TypeTargetConfidenceTier
AttackPatternAdversary in the Middle (AiTM)capec-94100%live

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CWE
Missing Validation of OpenSSL Certificate
CWE
Authentication Bypass by Alternate Name
CWE
DEPRECATED: Authentication Bypass Issues
CWE
Authentication Bypass by Spoofing
CWE
Improper Validation of Certificate with Host Mismatch
CWE
Incorrect Implementation of Authentication Algorithm
Sourced from MITRE CWE 4.20. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.