Mitigation Strategies

The vulnerability is fixed in Botan version 3.11.1. Immediate mitigation involves upgrading the Botan cryptography library to version 3.11.1 or later.

Useful 0 Not Useful 0

Executive Summary

This vulnerability exists in the Botan C++ cryptography library's TLS 1.3 implementation prior to version 3.11.1. It allows ApplicationData records to be processed before the Finished message is received during a TLS handshake.

Specifically, a server that enforces client authentication via certificates can be bypassed by a client that omits sending the Certificate, CertificateVerify, and Finished messages, and instead sends application data records directly.

This means the client can skip the authentication steps and still have its application data processed, which is a security flaw.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can allow an attacker to bypass client authentication on a server using Botan's TLS 1.3 implementation prior to version 3.11.1.

As a result, unauthorized clients could send application data without proving their identity, potentially leading to unauthorized access or data exposure.

This undermines the security guarantees of TLS client authentication and could compromise the confidentiality and integrity of communications.

Useful 0 Not Useful 0