COMMON WEAKNESS ENUMERATIONDraft

CWE-593

Authentication Bypass: OpenSSL CTX Object Modified after SSL Objects are Created

The product modifies the SSL context after connection creation has begun.

Abstraction

Variant

Structure

Simple

Likelihood of Exploit

Medium

Understand the problem

What is the problem?

The product modifies the SSL context after connection creation has begun.

Extended description

If the program modifies the SSL_CTX object after creating SSL objects from it, there is the possibility that older SSL objects created from the original context could all be affected by that change.

Root cause

How and when does the problem arise?

Lifecycle phase

Implementation

REALIZATION: This weakness is caused during implementation of an architectural security tactic.

Risk

What does successful exploitation lead to?

Bypass Protection Mechanism

Affected security scopes: Access Control

No authentication takes place in this process, bypassing an assumed protection of encryption.
Read Application Data

Affected security scopes: Confidentiality

The encrypted communication between a user and a trusted host may be subject to a sniffing attack.

Defence

How is it prevented and fixed?

Architecture and Design

Architecture and design approach

Detail
Use a language or a library that provides a cryptography framework at a higher level of abstraction.

Implementation

Implementation-phase defence

Detail
Most SSL_CTX functions have SSL counterparts that act on SSL-type objects.

Implementation

Implementation-phase defence

Detail
Applications should set up an SSL_CTX completely, before creating SSL objects from it.
CWE-593: Common Weakness Enumeration Entry CWE-593 · DayBreach Sözlük · DayBreach