UpHeron
All vulnerabilities

Servers and applications

CVE-2022-37026

In Erlang/OTP before 23.3.4.15, 24.x before 24.3.4.2, and 25.x before 25.0.2, there is a Client Authentication Bypass in certain client-certification situations for SSL, TLS, and DTLS.

Severity
Critical 9.8
Published
21 Sept 2022
Last changed
17 Jun 2026
Added to UpHeron
16 Oct 2026
Fixed in
23.3.4.15, 24.3.4.2, 25.0.2
Sources
NVD

Affected software

SoftwareAffected versions
Erlang/OTPServers and applications · cpe:a:erlang:erlang\/otp
  • Every version before 23.3.4.15
  • From 24.0 before 24.3.4.2
  • From 25.0 before 25.0.2

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2022-37026
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2022-37026