OpenSSL and SSLeay allow remote attackers to reuse SSL sessions and bypass access controls.
CVSS Metrics