← Back

CVE-2012-4523

nvd nist
Published: Nov 20, 2012Modified: Apr 29, 2026

JSON object

Loading...
6.4
Vector
AV:N/AC:L/Au:N/C:P/I:P/A:N
Exploitability: 10.0 / Impact: 4.9
Source: NVD

Description

radsecproxy before 1.6.1 does not properly verify certificates when there are configuration blocks with CA settings that are unrelated to the block being used for verifying the certificate chain, which might allow remote attackers to bypass intended access restrictions and spoof clients.

Affected (17)

Products: Uninett: Radsecproxy
Uninett
1 product
Radsecproxy
Configuration A
17 vulnerable
Vulnerable SoftwareAffected Versions
Uninett
Radsecproxy
Up to 1.6
Radsecproxy
Version 1.0
Radsecproxy
Version 1.0 alpha-p1
Radsecproxy
Version 1.0 alpha
Radsecproxy
Version 1.0 p1
Radsecproxy
Version 1.1
Radsecproxy
Version 1.1 alpha
Radsecproxy
Version 1.1 beta
Radsecproxy
Version 1.2
Radsecproxy
Version 1.3.1
Radsecproxy
Version 1.3 alpha
Radsecproxy
Version 1.3 beta
Radsecproxy
Version 1.4.1
Radsecproxy
Version 1.4.2
Radsecproxy
Version 1.4.3
Radsecproxy
Version 1.4
Radsecproxy
Version 1.5

Related CWEs

CWE-264
CWE-264

References (16)

Source: secalert@redhat.com
Vendor Advisory
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.