CVE-2023-5422

SSL Certificates are not checked for E-Mail Handling

Severity Score

9.1

*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

Attend

*SSVC

Descriptions

The functions to fetch e-mail via POP3 or IMAP as well as sending e-mail via SMTP use OpenSSL for static SSL or TLS based communication. As the
SSL_get_verify_result() function is not used the certificated is trusted always and it can not be ensured that the certificate
satisfies all necessary security requirements.

This could allow an
attacker to use an invalid certificate to claim to be a trusted host,
use expired certificates, or conduct other attacks that could be
detected if the certificate is properly validated.

This issue affects OTRS: from 7.0.X before 7.0.47, from 8.0.X before 8.0.37; ((OTRS)) Community Edition: from 6.0.X through 6.0.34.

Las funciones para recuperar correos electrónicos a través de POP3 o IMAP, así como enviar correos electrónicos a través de SMTP, utilizan OpenSSL para comunicaciones basadas en SSL o TLS estáticas. Como no se utiliza la función SSL_get_verify_result(), el certificado siempre es confiable y no se puede garantizar que el certificado cumpla con todos los requisitos de seguridad necesarios. Esto podría permitir a un atacante utilizar un certificado no válido para afirmar que es un host confiable, utilizar certificados caducados o realizar otros ataques que podrían detectarse si el certificado se valida correctamente. Este problema afecta a OTRS: desde 7.0.X anterior a 7.0.47, desde 8.0.X anterior a 8.0.37; ((OTRS)) Community Edition: desde 6.0.X hasta 6.0.34.

*Credits: Special thanks to Matthias Terlinde for reporting these vulnerability.

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

None

Attack Vector

Network

Attack Complexity

High

Privileges Required

None

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

High

Availability

None

* Common Vulnerability Scoring System

SSVC

Decision:Attend

Exploitation

None

Automatable

Yes

Tech. Impact

Total

* Organization's Worst-case Scenario

Timeline

2023-10-05 CVE Reserved
2023-10-16 CVE Published
2024-09-15 EPSS Updated
2024-09-16 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-295: Improper Certificate Validation

CAPEC

CAPEC-475: Signature Spoofing by Improper Validation

References (1)

URL	Tag	Source

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC
https://otrs.com/release-notes/otrs-security-advisory-2023-10	2023-10-20

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Otrs Search vendor "Otrs"		Otrs Search vendor "Otrs" for product "Otrs"				>= 6.0.0 <= 6.0.34 Search vendor "Otrs" for product "Otrs" and version " >= 6.0.0 <= 6.0.34"		community		Affected
Otrs Search vendor "Otrs"		Otrs Search vendor "Otrs" for product "Otrs"				>= 7.0.0 < 7.0.47 Search vendor "Otrs" for product "Otrs" and version " >= 7.0.0 < 7.0.47"		-		Affected
Otrs Search vendor "Otrs"		Otrs Search vendor "Otrs" for product "Otrs"				>= 8.0.0 < 8.0.37 Search vendor "Otrs" for product "Otrs" and version " >= 8.0.0 < 8.0.37"		-		Affected