CRITICAL🇬🇧 English

CVE-2022-37026

CVSS 9.8v3.1pub. 2022-09-21upd. 2025-05-27

In Erlang/OTP before 23.3.4.15, 24.x before 24.3.4.2, and 25.x before 25.0.2, there is a Client Authentication Bypass in certain client-certification situations for SSL, TLS, and DTLS.

oryginał EN
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Erlang Erlang\/otp

    APP
    Erlang
    < 23.3.4.1524.0 – 24.3.4.2 (bez)25.0 – 25.0.2 (bez)
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Tagi
Auth Bypass
CWE
Referencje

Powiązane podatności

CVE-2025-32433CRITICAL10.0⚠ KEVPL ✓ten sam produkt

Erlang/OTP SSH — nieuwierzytelniony RCE (CVSS 10.0)

CVE-2016-10253CRITICAL9.8ten sam produkt

An issue was discovered in Erlang/OTP 18.x. Erlang's generation of compiled regular expressions is vulnerable ...

CVE-2026-48860HIGH7.5ten sam produkt

Reliance on IP Address for Authentication vulnerability in Erlang/OTP ssl (inet_tls_dist module) allows unauth...

CVE-2026-48856HIGH7.1ten sam produkt

Sensitive Data Exposure vulnerability in Erlang OTP inets (httpc_response module) allows Retrieve Embedded Sen...

CVE-2026-49759HIGH8.8ten sam produkt

Stack-based Buffer Overflow vulnerability in Erlang OTP erts (inet_drv) allows an unauthenticated remote attac...