CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 7.5. It affects Exchange.
CVE
CVE-2021-34433
Severity
HIGH
CVSS
7.5
EPSS
0.34%
Exchange
Original NVD Description
In Eclipse Californium version 2.0.0 to 2.6.4 and 3.0.0-M1 to 3.0.0-M3, the certificate based (x509 and RPK) DTLS handshakes accidentally succeeds without verifying the server side's signature on the client side, if that signature is not included in the server's ServerKeyExchange.
Related CVEs
Other vulnerabilities affecting the same vendor(s)