CVE-2022-37026

Name of the Vulnerable Software and Affected Versions Erlang/OTP versions prior to 23.3.4.15 Erlang/OTP versions 24.x prior to 24.3.4.2 Erlang/OTP versions 25.x prior to 25.0.2

Description The issue is related to a Client Authentication Bypass in certain client-certification situations for SSL, TLS, and DTLS. This allows a remote attacker to access confidential data, compromise its integrity, and cause a denial of service. The vulnerability is associated with deficiencies in the authentication procedure.

Recommendations For Erlang/OTP versions prior to 23.3.4.15, update to version 23.3.4.15 or later. For Erlang/OTP versions 24.x prior to 24.3.4.2, update to version 24.3.4.2 or later. For Erlang/OTP versions 25.x prior to 25.0.2, update to version 25.0.2 or later.