CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.8. It may be remotely exploitable.
CVE
CVE-2011-2701
Severity
MEDIUM
CVSS
5.8
EPSS
1.85%
Original NVD Description
The ocsp_check function in rlm_eap_tls.c in FreeRADIUS 2.1.11, when OCSP is enabled, does not properly parse replies from OCSP responders, which allows remote attackers to bypass authentication by using the EAP-TLS protocol with a revoked X.509 client certificate.