Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

wildfly-security/wildfly-openssl

              main @ cbece77
            

Fixes

CVEs

HIGH

Peak severity

Highlights

Auth Bypass: 6 prior fixes. Scrutinize any change in this area.

OpenSSLEngine.java: most-fixed (2 issues). Treat as high-risk during review.

3 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: The SSLSession principal retrieval incorrectly returned the certificate Issuer X500 Principal instead of the Subject X500 Principal. This allowed clients with valid certificates signed by trusted authorities to masquerade as the principal of the issuer, enabling severe identity spoofing and authentication bypasses in systems relying on peer principal authorization.

Auth Bypass: Configuring SSLParameters on client-side connections inadvertently disabled remote server certificate verification by incorrectly overriding and applying client authentication settings to the verification state. This exposed TLS connections to silent man-in-the-middle (MitM) attacks.

Auth Bypass: Failing to use a default trust manager when no custom trust manager was provided led to the complete omission of trust verification. This allowed unverified and untrusted certificates to be accepted during TLS handshake negotiations.