Authentication Bypass: OpenSSL CTX Object Modified after SSL Objects are Created

Opis

The product modifies the SSL context after connection creation has begun.

If the program modifies the SSL_CTX object after creating SSL objects from it, there is the possibility that older SSL objects created from the original context could all be affected by that change.

Skutki

• Access Control

  Bypass Protection Mechanism

  No authentication takes place in this process, bypassing an assumed protection of encryption.

• Confidentiality

  Read Application Data

  The encrypted communication between a user and a trusted host may be subject to a sniffing attack.

Zapobieganie

• Architecture and Design

  Use a language or a library that provides a cryptography framework at a higher level of abstraction.

• Implementation

  Most SSL_CTX functions have SSL counterparts that act on SSL-type objects.

• Implementation

  Applications should set up an SSL_CTX completely, before creating SSL objects from it.

Słabość nadrzędna

• CWE-666 Operation on Resource in Wrong Phase of Lifetime
• CWE-1390 Weak Authentication

Kiedy powstaje

• Implementation — REALIZATION: This weakness is caused during implementation of an architectural security tactic.

Dotyczy

Not Language-Specific