CVE-2021-44273: e2bn e2guardian

csirt@kutim:~/threat-intel/cve/CVE-2021-44273

CVSS 7.4 · High EPSS 0,97%

Kerentanan Improper Certificate Validation pada e2bn e2guardian. Skor CVSS 3.1 7.4 (High) menurut NVD.

Deskripsi (NVD)

e2guardian v5.4.x <= v5.4.3r is affected by missing SSL certificate validation in the SSL MITM engine. In standalone mode (i.e., acting as a proxy or a transparent proxy), with SSL MITM enabled, e2guardian, if built with OpenSSL v1.1.x, did not validate hostnames in certificates of the web servers that it connected to, and thus was itself vulnerable to MITM attacks.

Rincian

Terbit di NVD: 23 Desember 2021
Terakhir diubah: 17 Juni 2026
Status NVD: Modified
CVSS 3.1: 7.4 (High), sumber NVD
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-295: Improper Certificate Validation
EPSS (30 hari): 0,97% peluang dieksploitasi; lebih tinggi dari 60,9% CVE lain

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
e2bn	e2guardian	Versi 5.4.0 hingga 5.4.3r

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

https://github.com/e2guardian/e2guardian/commit/eae46a7e2a57103aadca903c4a24cca94dc502a2 patch · advisory pihak ketiga
https://github.com/e2guardian/e2guardian/issues/707 exploit · issue tracking · patch · advisory pihak ketiga
http://www.openwall.com/lists/oss-security/2021/12/23/2 mailing list · advisory pihak ketiga
https://lists.debian.org/debian-lts-announce/2023/09/msg00010.html

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.