Security Advisory
CVE-2022-25638
6.5
MEDIUM
Vulnerability Description
In wolfSSL before 5.2.0, certificate validation may be bypassed during attempted authentication by a TLS 1.3 client to a TLS 1.3 server. This occurs when the sig_algo field differs between the certificate_verify message and the certificate message.
Published Date
February 24, 2022
Official Source
NIST NVD Advisory