CVE-2022-1343

The function `OCSP_basic_verify` verifies the signer certificate on an OCSP response. In the case where the (non-default) flag OCSP_NOCHECKS is used then the response will be positive (meaning a successful verification) even in the case where the response signing certificate fails to verify. It is anticipated that most users of `OCSP_basic_verify` will not use the OCSP_NOCHECKS flag. In this case the `OCSP_basic_verify` function will return a negative value (indicating a fatal error) in the case of a certificate verification failure. The normal expected return value in this case would be 0. This issue also impacts the command line OpenSSL "ocsp" application. When verifying an ocsp response with the "-no_cert_checks" option the command line application will report that the verification is successful even though it has in fact failed. In this case the incorrect successful response will also be accompanied by error messages showing the failure and contradicting the apparently successful result. Fixed in OpenSSL 3.0.3 (Affected 3.0.0,3.0.1,3.0.2).

• CWE-295
• CWE-295

• https://cert-portal.siemens.com/productcert/pdf/ssa-953464.pdf
• https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=2eda98790c5c2741d76d23cc1e74b0dc4f4b391a
• https://security.netapp.com/advisory/ntap-20220602-0009/Third Party Advisory
• https://www.openssl.org/news/secadv/20220503.txtVendor Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-953464.pdf
• https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=2eda98790c5c2741d76d23cc1e74b0dc4f4b391a
• https://security.netapp.com/advisory/ntap-20220602-0009/Third Party Advisory
• https://www.openssl.org/news/secadv/20220503.txtVendor Advisory

Published

May 3, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-1337The image proxy component in Mattermost version 6.4.1 and ea…6.5
• CVE-2022-1338The Easily Generate Rest API Url WordPress plugin through 1.…4.8
• CVE-2022-1339SQL injection in ElementController.php in GitHub repository …7.5
• CVE-2022-1340Cross-site Scripting (XSS) - Stored in GitHub repository yet…5.4
• CVE-2022-1341An issue was discovered in in bwm-ng v0.6.2. An arbitrary nu…7.5
• CVE-2022-1342A lack of password masking in Devolutions Remote Desktop Man…4.6
• CVE-2022-1344Stored XSS due to no sanitization in the filename in GitHub …9
• CVE-2022-1345Stored XSS viva .svg file upload in GitHub repository causef…9
• CVE-2022-1346Multiple Stored XSS in GitHub repository causefx/organizr pr…9
• CVE-2022-1347Stored XSS in the "Username" & "Email" input fields leads to…8.4
• CVE-2022-1348A vulnerability was found in logrotate in how the state file…6.5
• CVE-2022-1349The WPQA Builder Plugin WordPress plugin before 5.2, used as…4.3