Published: 18/01/2023 Updated: 08/08/2023

CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9

VMScore: 0

An issue in MatrixSSL 4.5.1-open and previous versions leads to failure to securely check the SessionID field, resulting in the misuse of an all-zero MasterSecret that can decrypt secret data.

Vulnerable Product	Search on Vulmon	Subscribe to Product
matrixssl matrixssl

MatrixSSL session resume bug

details-for-CVE-2022-46505 MatrixSSL session resume bug 1 Description of bug An issue in MatrixSSL 451-open and earlier leads to failure to securely check the SessionID field, resulting in the misuse of an all-zero MasterSecret that can decrypt secret data 2 Affected version MatrixSSL 451-open and earlier 3 Vulnerability Type tls resume session decryption 4 Bug details

MatrixSSL session resume bug

details-for-CVE-2022-46505 MatrixSSL session resume bug 1 Description of bug An issue in MatrixSSL 451-open and earlier leads to failure to securely check the SessionID field, resulting in the misuse of an all-zero MasterSecret that can decrypt secret data 2 Affected version MatrixSSL 451-open and earlier 3 Vulnerability Type tls resume session decryption 4 Bug details

CWE-665 https://github.com/SmallTown123/details-for-CVE-2022-46505 https://smalltown123.notion.site/MatrixSSL-session-resume-bug-a0 https://nvd.nist.gov https://github.com/SmallTown123/Details-for-CVE-2022-46505

CVE-2022-46505

Vulnerability Summary

Vulnerability Trend

Github Repositories

References

Vulmon Search

About

Products

Connect