CyberRota Analysis
AI-GeneratedThe vulnerability in strongSwan versions 4.5.0 to 6.0.7 arises from incorrect access control in the eap-ttls and eap-peap plugins, potentially allowing unauthorized access due to a missing or mismatched inner EAP identity. This could lead to exposure of sensitive information or unauthorized network access. Organizations using affected versions of strongSwan should prioritize remediation to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
strongSwan 4.5.0 through 6.0.7 has Incorrect Access Control in the eap-ttls and eap-peap plugins because there can be a missing or mismatched inner EAP identity.