CVE-2022-4967: Strongswan Trust Cert Subject Bypass
When looking up trusted public keys, the expected connection identity must be used rather than the subject extracted directly from the presented certificate. Extracting the identity from the unverified certificate can allow an attacker to bypass authorization by presenting a different, trusted certificate. Pass the expected identity (e.g., `identification_t`
Cgreprules fetch cve-2022-4967-strongswan-trust-cert-subject-bypass --engine opengrepDescription
When looking up trusted public keys, the expected connection identity must be used rather than the subject extracted directly from the presented certificate. Extracting the identity from the unverified certificate can allow an attacker to bypass authorization by presenting a different, trusted certificate. Pass the expected identity (e.g., `identification_t`
Community feedback
0 rule-level signals from signed-in users.
- Useful reports
- 0
- Context false positives
- 0
- Metadata suggestions
- 0
Contextual precision
Aggregated from approved scan feedback. False-positive reports describe observed scan contexts, not a global rule verdict.
- Findings observed
- 0
- Projects
- 0
- Reporters
- 0
Precision details are collecting more signed-in reports before verdict counts or ratios are emphasized.
No approved finding verdicts yet.
No scan diagnostics reported yet.