CWE-593: Authentication Bypass: OpenSSL CTX Object Modified after SSL Objects are Created
Description
The product modifies the SSL context after connection creation has begun.
If the program modifies the SSL_CTX object after creating SSL objects from it, there is the possibility that older SSL objects created from the original context could all be affected by that change.
- Abstraction
- VariantA weakness tied to a specific language, technology or resource.
- Likelihood of exploit
- Not rated by MITRE
- Status
- Draft
Common consequences
- Access Control
Bypass Protection Mechanism
No authentication takes place in this process, bypassing an assumed protection of encryption.
- Confidentiality
Read Application Data
The encrypted communication between a user and a trusted host may be subject to a sniffing attack.
Potential mitigations
- Architecture and Design
Use a language or a library that provides a cryptography framework at a higher level of abstraction.
- Implementation
Most SSL_CTX functions have SSL counterparts that act on SSL-type objects.
- Implementation
Applications should set up an SSL_CTX completely, before creating SSL objects from it.