Description
Incorrect validation of OCSP certificates vulnerability in TheGreenBow VPN, versions 7.5 and 7.6. During the IKEv2 authentication step, the OCSP-enabled VPN client establishes the tunnel even if it does not receive an OCSP response or if the OCSP response signature is invalid.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| TheGreenBow | TheGreenBow VPN Client Windows Enterprise | 7.5, 7.6 | — |