AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2004-0590

HIGH · CVSS 10 EPSS 2.83%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2004-12-06 · Last synced 2026-08-04

CyberRota Analysis

This is a high severity vulnerability with a CVSS score of 10.0. It may be remotely exploitable.

CVE
CVE-2004-0590
Severity
HIGH
CVSS
10
EPSS
2.83%

Original NVD Description

FreeS/WAN 1.x and 2.x, and other related products including superfreeswan 1.x, openswan 1.x before 1.0.6, openswan 2.x before 2.1.4, and strongSwan before 2.1.3, allows remote attackers to authenticate using spoofed PKCS#7 certificates in which a self-signed certificate identifies an alternate Certificate Authority (CA) and spoofed issuer and subject.