Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
In wolfSSL before 5.2.0, certificate validation may be bypassed during attempted authentication by a TLS 1.3 client to a TLS 1.3 server. This occurs when the sig_algo field differs between the certificate_verify message and the certificate message.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
wolfSSL 信任管理问题漏洞
Vulnerability Description
Wolfssl（CyaSSL）是美国Wolfssl公司的一个针对嵌入式系统开发人员使用的小的、可移植的嵌入式SSL编程库。 wolfSSL 5.2.0之前版本存在安全漏洞，该漏洞源于应用尝试验证TLS 1.3客户端到TLS 1.3服务器的过程中，当证书验证消息和证书消息之间的sig algo字段不同时，可能会绕过证书验证。
CVSS Information
N/A
Vulnerability Type
N/A