CVEvulnerability

CVE-2026-45389

7.4 HIGH Published 2026-06-15 Modified 2026-06-17 Official page ↗
Status
Deferred
Published
2026-06-15
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
7.4 HIGH — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Weaknesses
CWE-295

Description

In OCaml-TLS before 2.1.0, the server implementation does insufficient checks of the certificate provided by the client (when doing client authentication), which allows impersonation with certificates that are not meant for client authentication (because of KeyUsage and ExtendedKeyUsage).

Related

Weakness · CWE (1)

  • CWE-295 Improper Certificate Validation weakness

References