CVE-2022-37026 - Vulnerability Details - OpenCVE

In Erlang/OTP before 23.3.4.15, 24.x before 24.3.4.2, and 25.x before 25.0.2, there is a Client Authentication Bypass in certain client-certification situations for SSL, TLS, and DTLS.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Vendors	Products
Erlang	Erlang\/otp
Redhat	Openstack

Configuration 1 [-]

OR	cpe:2.3:a:erlang:erlang\/otp::::::::
	cpe:2.3:a:erlang:erlang\/otp::::::::
	cpe:2.3:a:erlang:erlang\/otp::::::::

Package	CPE	Advisory	Released Date
Red Hat OpenStack Platform 16.2
erlang-0:23.3.4.18-1.el8ost	cpe:/a:redhat:openstack:16.2::el8	RHSA-2022:8857	2022-12-07T00:00:00Z

References

Link	Providers
https://erlangforums.com/c/erlang-news-announcements/91
https://erlangforums.com/t/otp-25-1-released/1854
https://github.com/erlang/otp/compare/OTP-23.3.4.14...OTP-23.3.4.15
https://github.com/erlang/otp/releases/tag/OTP-25.1
https://lists.debian.org/debian-lts-announce/2023/07/msg00012.html
https://nvd.nist.gov/vuln/detail/CVE-2022-37026
https://www.cve.org/CVERecord?id=CVE-2022-37026
https://www.erlang.org/patches/otp-25.1

History

Tue, 27 May 2025 19:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2022-09-21T00:00:00.000Z

Updated: 2025-05-27T18:19:43.782Z

Reserved: 2022-07-29T00:00:00.000Z

Link: CVE-2022-37026

Vulnrichment

Updated: 2024-08-03T10:21:32.690Z

NVD

Status : Modified

Published: 2022-09-21T14:15:11.223

Modified: 2025-05-27T19:15:22.210

Link: CVE-2022-37026

Redhat

Severity : Critical

Publid Date: 2022-09-21T00:00:00Z

Links: CVE-2022-37026 - Bugzilla

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"state": "PUBLISHED", "cveId": "CVE-2022-37026", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "dateUpdated": "2025-05-27T18:19:43.782Z", "dateReserved": "2022-07-29T00:00:00.000Z", "datePublished": "2022-09-21T00:00:00.000Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2023-07-11T00:00:00.000Z"}, "descriptions": [{"lang": "en", "value": "In Erlang/OTP before 23.3.4.15, 24.x before 24.3.4.2, and 25.x before 25.0.2, there is a Client Authentication Bypass in certain client-certification situations for SSL, TLS, and DTLS."}], "affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"version": "n/a", "status": "affected"}]}], "references": [{"url": "https://github.com/erlang/otp/compare/OTP-23.3.4.14...OTP-23.3.4.15"}, {"url": "https://erlangforums.com/c/erlang-news-announcements/91"}, {"url": "https://erlangforums.com/t/otp-25-1-released/1854"}, {"name": "[debian-lts-announce] 20230711 [SECURITY] [DLA 3491-1] erlang security update", "tags": ["mailing-list"], "url": "https://lists.debian.org/debian-lts-announce/2023/07/msg00012.html"}], "problemTypes": [{"descriptions": [{"type": "text", "lang": "en", "description": "n/a"}]}]}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T10:21:32.690Z"}, "title": "CVE Program Container", "references": [{"url": "https://github.com/erlang/otp/compare/OTP-23.3.4.14...OTP-23.3.4.15", "tags": ["x_transferred"]}, {"url": "https://erlangforums.com/c/erlang-news-announcements/91", "tags": ["x_transferred"]}, {"url": "https://erlangforums.com/t/otp-25-1-released/1854", "tags": ["x_transferred"]}, {"name": "[debian-lts-announce] 20230711 [SECURITY] [DLA 3491-1] erlang security update", "tags": ["mailing-list", "x_transferred"], "url": "https://lists.debian.org/debian-lts-announce/2023/07/msg00012.html"}]}, {"problemTypes": [{"descriptions": [{"type": "CWE", "lang": "en", "description": "CWE-noinfo Not enough information"}]}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2025-05-27T15:29:58.748388Z", "id": "CVE-2022-37026", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-05-27T18:19:43.782Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://github.com/erlang/otp/compare/OTP-23.3.4.14...OTP-23.3.4.15", "tags": ["x_transferred"]}, {"url": "https://erlangforums.com/c/erlang-news-announcements/91", "tags": ["x_transferred"]}, {"url": "https://erlangforums.com/t/otp-25-1-released/1854", "tags": ["x_transferred"]}, {"url": "https://lists.debian.org/debian-lts-announce/2023/07/msg00012.html", "name": "[debian-lts-announce] 20230711 [SECURITY] [DLA 3491-1] erlang security update", "tags": ["mailing-list", "x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T10:21:32.690Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2022-37026", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-05-27T15:29:58.748388Z"}}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "description": "CWE-noinfo Not enough information"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-05-27T15:30:58.388Z"}}], "cna": {"affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "references": [{"url": "https://github.com/erlang/otp/compare/OTP-23.3.4.14...OTP-23.3.4.15"}, {"url": "https://erlangforums.com/c/erlang-news-announcements/91"}, {"url": "https://erlangforums.com/t/otp-25-1-released/1854"}, {"url": "https://lists.debian.org/debian-lts-announce/2023/07/msg00012.html", "name": "[debian-lts-announce] 20230711 [SECURITY] [DLA 3491-1] erlang security update", "tags": ["mailing-list"]}], "descriptions": [{"lang": "en", "value": "In Erlang/OTP before 23.3.4.15, 24.x before 24.3.4.2, and 25.x before 25.0.2, there is a Client Authentication Bypass in certain client-certification situations for SSL, TLS, and DTLS."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "text", "description": "n/a"}]}], "providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2023-07-11T00:00:00.000Z"}}}, "cveMetadata": {"cveId": "CVE-2022-37026", "state": "PUBLISHED", "dateUpdated": "2025-05-27T18:19:43.782Z", "dateReserved": "2022-07-29T00:00:00.000Z", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "datePublished": "2022-09-21T00:00:00.000Z", "assignerShortName": "mitre"}, "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*", "matchCriteriaId": "CD5D60C5-7E93-4B91-A04C-A416D11299C1", "versionEndExcluding": "23.3.4.15", "vulnerable": true}, {"criteria": "cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*", "matchCriteriaId": "B1058D97-F099-4FF9-A84F-3EE257E807C6", "versionEndExcluding": "24.3.4.2", "versionStartIncluding": "24.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*", "matchCriteriaId": "B6091705-FAC3-4A2B-B5A6-93AFC892526A", "versionEndExcluding": "25.0.2", "versionStartIncluding": "25.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In Erlang/OTP before 23.3.4.15, 24.x before 24.3.4.2, and 25.x before 25.0.2, there is a Client Authentication Bypass in certain client-certification situations for SSL, TLS, and DTLS."}, {"lang": "es", "value": "En Erlang/OTP versiones anteriores a 23.3.4.15, 24.x anteriores a 24.3.4.2 y 25.x anteriores a 25.0.2, se presenta una Omisi\u00f3n de Autenticaci\u00f3n de Cliente en determinadas situaciones de certificaci\u00f3n de cliente para SSL, TLS y DTLS"}], "id": "CVE-2022-37026", "lastModified": "2025-05-27T19:15:22.210", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}, "published": "2022-09-21T14:15:11.223", "references": [{"source": "cve@mitre.org", "tags": ["Release Notes", "Vendor Advisory"], "url": "https://erlangforums.com/c/erlang-news-announcements/91"}, {"source": "cve@mitre.org", "tags": ["Release Notes", "Vendor Advisory"], "url": "https://erlangforums.com/t/otp-25-1-released/1854"}, {"source": "cve@mitre.org", "tags": ["Patch", "Third Party Advisory"], "url": "https://github.com/erlang/otp/compare/OTP-23.3.4.14...OTP-23.3.4.15"}, {"source": "cve@mitre.org", "url": "https://lists.debian.org/debian-lts-announce/2023/07/msg00012.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Release Notes", "Vendor Advisory"], "url": "https://erlangforums.com/c/erlang-news-announcements/91"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Release Notes", "Vendor Advisory"], "url": "https://erlangforums.com/t/otp-25-1-released/1854"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Third Party Advisory"], "url": "https://github.com/erlang/otp/compare/OTP-23.3.4.14...OTP-23.3.4.15"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://lists.debian.org/debian-lts-announce/2023/07/msg00012.html"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}