Security Advisory - MITM Vulnerability in the OpenSSL Module of Huawei eSight Network

During certificate verification, OpenSSL (starting from version 1.0.1n and 1.0.2b) will attempt to find an alternative certificate chain if the first attempt to build such a chain fails. An error in the implementation of this logic can mean that an attacker could cause certain checks on untrusted certificates to be bypassed. This vulnerability could allow an attacker to launch man-in-the-middle (MITM) attacks and enable applications to regard invalid certificates as valid. (Vulnerability ID: HWPSIRT-2015-07033)

This Vulnerability has been assigned Common Vulnerabilities and Exposures (CVE) ID: CVE-2015-1793.