Common Weakness Enumeration
CWE-295
AllowedImproper Certificate Validation
Abstraction: Base · Status: Draft
The product does not validate, or incorrectly validates, a certificate.
1916 vulnerabilities reference this CWE, most recent first.
GHSA-F727-J88G-P3M8
Vulnerability from github – Published: 2022-05-13 01:38 – Updated: 2022-05-13 01:38
VLAI
Details
A flaw was found in all Openshift Enterprise versions using the openshift elasticsearch plugin. An attacker with knowledge of the given name used to authenticate and access Elasticsearch can later access it without the token, bypassing authentication. This attack also requires that the Elasticsearch be configured with an external route, and the data accessed is limited to the indices.
Severity
4.8 (Medium)
{
"affected": [],
"aliases": [
"CVE-2017-12195"
],
"database_specific": {
"cwe_ids": [
"CWE-287",
"CWE-295"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2018-07-27T15:29:00Z",
"severity": "MODERATE"
},
"details": "A flaw was found in all Openshift Enterprise versions using the openshift elasticsearch plugin. An attacker with knowledge of the given name used to authenticate and access Elasticsearch can later access it without the token, bypassing authentication. This attack also requires that the Elasticsearch be configured with an external route, and the data accessed is limited to the indices.",
"id": "GHSA-f727-j88g-p3m8",
"modified": "2022-05-13T01:38:11Z",
"published": "2022-05-13T01:38:11Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-12195"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2017:3188"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2017:3389"
},
{
"type": "WEB",
"url": "https://access.redhat.com/security/cve/CVE-2017-12195"
},
{
"type": "WEB",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1501986"
},
{
"type": "WEB",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-12195"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"type": "CVSS_V3"
}
]
}
GHSA-F728-V2H3-3VFV
Vulnerability from github – Published: 2025-08-14 06:30 – Updated: 2025-08-14 06:30
VLAI
Details
An insufficient validation on the server connection endpoint in Netskope Client allows local users to elevate privileges on the system. The insufficient validation allows Netskope Client to connect to any other server with Public Signed CA TLS certificates and send specially crafted responses to elevate privileges.
Severity
{
"affected": [],
"aliases": [
"CVE-2025-0309"
],
"database_specific": {
"cwe_ids": [
"CWE-295"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-08-14T05:15:26Z",
"severity": "MODERATE"
},
"details": "An insufficient validation on the server connection endpoint in Netskope Client allows local users to elevate privileges on the system. The insufficient validation allows Netskope Client to connect to any other server with Public Signed CA TLS certificates and send specially crafted responses to elevate privileges.",
"id": "GHSA-f728-v2h3-3vfv",
"modified": "2025-08-14T06:30:33Z",
"published": "2025-08-14T06:30:33Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-0309"
},
{
"type": "WEB",
"url": "https://blog.amberwolf.com/blog/2025/august/breaking-into-your-network-zer0-effort"
},
{
"type": "WEB",
"url": "https://www.netskope.com/company/security-compliance-and-assurance/security-advisories-and-disclosures/netskope-security-advisory-nskpsa-2025-002"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:4.0/AV:P/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"type": "CVSS_V4"
}
]
}
GHSA-F7Q5-QG45-7VM8
Vulnerability from github – Published: 2025-07-10 09:32 – Updated: 2026-05-12 15:30
VLAI
Details
A heap-buffer-overread vulnerability was found in GnuTLS in how it handles the Certificate Transparency (CT) Signed Certificate Timestamp (SCT) extension during X.509 certificate parsing. This flaw allows a malicious user to create a certificate containing a malformed SCT extension (OID 1.3.6.1.4.1.11129.2.4.2) that contains sensitive data. This issue leads to the exposure of confidential information when GnuTLS verifies certificates from certain websites when the certificate (SCT) is not checked correctly.
Severity
5.3 (Medium)
{
"affected": [],
"aliases": [
"CVE-2025-32989"
],
"database_specific": {
"cwe_ids": [
"CWE-295"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-07-10T08:15:24Z",
"severity": "MODERATE"
},
"details": "A heap-buffer-overread vulnerability was found in GnuTLS in how it handles the Certificate Transparency (CT) Signed Certificate Timestamp (SCT) extension during X.509 certificate parsing. This flaw allows a malicious user to create a certificate containing a malformed SCT extension (OID 1.3.6.1.4.1.11129.2.4.2) that contains sensitive data. This issue leads to the exposure of confidential information when GnuTLS verifies certificates from certain websites when the certificate (SCT) is not checked correctly.",
"id": "GHSA-f7q5-qg45-7vm8",
"modified": "2026-05-12T15:30:54Z",
"published": "2025-07-10T09:32:27Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-32989"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2025:16115"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2025:16116"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2025:17181"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2025:17348"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2025:17361"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2025:19088"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2025:22529"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:7477"
},
{
"type": "WEB",
"url": "https://access.redhat.com/security/cve/CVE-2025-32989"
},
{
"type": "WEB",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2359621"
},
{
"type": "WEB",
"url": "https://cert-portal.siemens.com/productcert/html/ssa-082556.html"
},
{
"type": "WEB",
"url": "https://lists.gnupg.org/pipermail/gnutls-help/2025-July/004883.html"
},
{
"type": "WEB",
"url": "http://www.openwall.com/lists/oss-security/2025/07/11/3"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"type": "CVSS_V3"
}
]
}
GHSA-F7VF-74CX-834M
Vulnerability from github – Published: 2022-05-24 17:32 – Updated: 2025-01-14 21:31
VLAI
Details
Improper certificate validation vulnerability in OpenVPN client in Synology DiskStation Manager (DSM) before 6.2.3-25426-2 allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
Severity
9.0 (Critical)
{
"affected": [],
"aliases": [
"CVE-2020-27648"
],
"database_specific": {
"cwe_ids": [
"CWE-295"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2020-10-29T09:15:00Z",
"severity": "CRITICAL"
},
"details": "Improper certificate validation vulnerability in OpenVPN client in Synology DiskStation Manager (DSM) before 6.2.3-25426-2 allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.",
"id": "GHSA-f7vf-74cx-834m",
"modified": "2025-01-14T21:31:41Z",
"published": "2022-05-24T17:32:35Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-27648"
},
{
"type": "WEB",
"url": "https://www.synology.com/security/advisory/Synology_SA_20_18"
},
{
"type": "WEB",
"url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2020-1058"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
"type": "CVSS_V3"
}
]
}
GHSA-F7W7-6PJC-WWM6
Vulnerability from github – Published: 2022-05-02 03:46 – Updated: 2026-06-08 23:46
VLAI
Summary
Apache Tomcat affected by vulnerability in TLS and SSL protocol
Details
The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext injection" attack, aka the "Project Mogul" issue.
Apache Tomcat was affected by this issue and introduced a workaround in versions 7.0.10, 6.0.32, and 5.5.33.
Severity
9.8 (Critical)
{
"affected": [
{
"package": {
"ecosystem": "Maven",
"name": "org.apache.tomcat:tomcat"
},
"ranges": [
{
"events": [
{
"introduced": "7.0.0"
},
{
"fixed": "7.0.10"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "Maven",
"name": "org.apache.tomcat:tomcat"
},
"ranges": [
{
"events": [
{
"introduced": "6.0.0"
},
{
"fixed": "6.0.32"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "Maven",
"name": "org.apache.tomcat:tomcat"
},
"ranges": [
{
"events": [
{
"introduced": "5.0.0"
},
{
"fixed": "5.5.33"
}
],
"type": "ECOSYSTEM"
}
]
}
],
"aliases": [
"CVE-2009-3555"
],
"database_specific": {
"cwe_ids": [
"CWE-295",
"CWE-300"
],
"github_reviewed": true,
"github_reviewed_at": "2024-02-22T19:39:23Z",
"nvd_published_at": "2009-11-09T17:30:00Z",
"severity": "CRITICAL"
},
"details": "The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a \"plaintext injection\" attack, aka the \"Project Mogul\" issue.\n\nApache Tomcat was affected by this issue and introduced a workaround in versions 7.0.10, 6.0.32, and 5.5.33.",
"id": "GHSA-f7w7-6pjc-wwm6",
"modified": "2026-06-08T23:46:14Z",
"published": "2022-05-02T03:46:22Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3555"
},
{
"type": "WEB",
"url": "https://github.com/apache/tomcat/commit/df9633116b5fec8f47f1f008fb89a6e9d5895cd0"
},
{
"type": "WEB",
"url": "https://github.com/apache/tomcat/commit/b4e9488629bf03b4b65abf335e536e85386d1366"
},
{
"type": "WEB",
"url": "https://github.com/apache/tomcat/commit/56f67141e82e16f68a860c3af9b7342da35cbe7d"
},
{
"type": "WEB",
"url": "https://github.com/apache/tomcat/commit/3d315ac9dfaa2c03b4df82938d78bf5b755766b3"
},
{
"type": "WEB",
"url": "https://github.com/apache/tomcat/commit/328a523cbb2a2d4cd55283180614d4e03e2f8f02"
},
{
"type": "WEB",
"url": "https://github.com/apache/tomcat/commit/30af3f5630542a2340781f66553e734a6fd69701"
},
{
"type": "WEB",
"url": "https://github.com/apache/tomcat/commit/2d4ca03acc27cc883c404d1745d92f983b6fada3"
},
{
"type": "WEB",
"url": "https://github.com/apache/tomcat/commit/14e4efd925da58b9fa63f20969fb7349b8a9c30d"
},
{
"type": "WEB",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8535"
},
{
"type": "WEB",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8366"
},
{
"type": "WEB",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7973"
},
{
"type": "WEB",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7478"
},
{
"type": "WEB",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7315"
},
{
"type": "WEB",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11617"
},
{
"type": "WEB",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11578"
},
{
"type": "WEB",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10088"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/rf8e8c091182b45daa50d3557cad9b10bb4198e3f08cf8f1c66a1b08d%40%3Cdev.tomcat.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/re3b72cbb13e1dfe85c4a06959a3b6ca6d939b407ecca80db12b54220%40%3Cdev.tomcat.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/f8e0814e11c7f21f42224b6de111cb3f5e5ab5c15b78924c516d4ec2%40%3Cdev.tomcat.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/ba661b0edd913b39ff129a32d855620dd861883ade05fd88a8ce517d%40%3Cdev.tomcat.apache.org%3E"
},
{
"type": "WEB",
"url": "https://kb.bluecoat.com/index?page=content\u0026id=SA50"
},
{
"type": "WEB",
"url": "https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01029.html"
},
{
"type": "WEB",
"url": "https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01020.html"
},
{
"type": "WEB",
"url": "https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00944.html"
},
{
"type": "WEB",
"url": "https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00645.html"
},
{
"type": "WEB",
"url": "https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00634.html"
},
{
"type": "WEB",
"url": "https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00449.html"
},
{
"type": "WEB",
"url": "https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00442.html"
},
{
"type": "WEB",
"url": "https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00428.html"
},
{
"type": "WEB",
"url": "https://www.exploit-db.com/exploits/10579"
},
{
"type": "WEB",
"url": "https://tomcat.apache.org/security-7.html"
},
{
"type": "WEB",
"url": "https://tomcat.apache.org/security-6.html"
},
{
"type": "WEB",
"url": "https://tomcat.apache.org/security-5.html"
},
{
"type": "WEB",
"url": "https://svn.resiprocate.org/rep/ietf-drafts/ekr/draft-rescorla-tls-renegotiate.txt"
},
{
"type": "WEB",
"url": "https://support.f5.com/kb/en-us/solutions/public/10000/700/sol10737.html"
},
{
"type": "WEB",
"url": "https://oval.cisecurity.org/repository/search/definition/oval:org.mitre.oval:def:8535"
},
{
"type": "WEB",
"url": "https://oval.cisecurity.org/repository/search/definition/oval:org.mitre.oval:def:8366"
},
{
"type": "WEB",
"url": "https://oval.cisecurity.org/repository/search/definition/oval:org.mitre.oval:def:7973"
},
{
"type": "WEB",
"url": "https://oval.cisecurity.org/repository/search/definition/oval:org.mitre.oval:def:7478"
},
{
"type": "WEB",
"url": "https://oval.cisecurity.org/repository/search/definition/oval:org.mitre.oval:def:7315"
},
{
"type": "WEB",
"url": "https://oval.cisecurity.org/repository/search/definition/oval:org.mitre.oval:def:11617"
},
{
"type": "WEB",
"url": "https://oval.cisecurity.org/repository/search/definition/oval:org.mitre.oval:def:11578"
},
{
"type": "WEB",
"url": "https://oval.cisecurity.org/repository/search/definition/oval:org.mitre.oval:def:10088"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2010:0440"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2010:0408"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2010:0339"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2010:0338"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2010:0337"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2010:0167"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2010:0166"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2010:0165"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2010:0164"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2010:0163"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2010:0162"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2010:0155"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2010:0130"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2010:0119"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2010:0011"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2009:1694"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2009:1580"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2009:1579"
},
{
"type": "WEB",
"url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888"
},
{
"type": "PACKAGE",
"url": "https://github.com/apache/tomcat"
},
{
"type": "WEB",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/54158"
},
{
"type": "WEB",
"url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-049"
},
{
"type": "WEB",
"url": "https://bz.apache.org/bugzilla/show_bug.cgi?id=50325"
},
{
"type": "WEB",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=533125"
},
{
"type": "WEB",
"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=545755"
},
{
"type": "WEB",
"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=526689"
},
{
"type": "WEB",
"url": "https://access.redhat.com/security/cve/CVE-2009-3555"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2015:1591"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2011:0880"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2010:0987"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2010:0986"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2010:0865"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2010:0807"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2010:0786"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2010:0770"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2010:0768"
},
{
"type": "WEB",
"url": "http://archives.neohapsis.com/archives/bugtraq/2013-11/0120.html"
},
{
"type": "WEB",
"url": "http://blog.g-sec.lu/2009/11/tls-sslv3-renegotiation-vulnerability.html"
},
{
"type": "WEB",
"url": "http://blogs.iss.net/archive/sslmitmiscsrf.html"
},
{
"type": "WEB",
"url": "http://blogs.sun.com/security/entry/vulnerability_in_tls_protocol_during"
},
{
"type": "WEB",
"url": "http://clicky.me/tlsvuln"
},
{
"type": "WEB",
"url": "http://extendedsubset.com/?p=8"
},
{
"type": "WEB",
"url": "http://extendedsubset.com/Renegotiating_TLS.pdf"
},
{
"type": "WEB",
"url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01945686"
},
{
"type": "WEB",
"url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02436041"
},
{
"type": "WEB",
"url": "http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751"
},
{
"type": "WEB",
"url": "http://kbase.redhat.com/faq/docs/DOC-20491"
},
{
"type": "WEB",
"url": "http://lists.apple.com/archives/security-announce/2010//May/msg00001.html"
},
{
"type": "WEB",
"url": "http://lists.apple.com/archives/security-announce/2010//May/msg00002.html"
},
{
"type": "WEB",
"url": "http://lists.apple.com/archives/security-announce/2010/Jan/msg00000.html"
},
{
"type": "WEB",
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-April/039561.html"
},
{
"type": "WEB",
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-April/039957.html"
},
{
"type": "WEB",
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-May/040652.html"
},
{
"type": "WEB",
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049455.html"
},
{
"type": "WEB",
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049528.html"
},
{
"type": "WEB",
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049702.html"
},
{
"type": "WEB",
"url": "http://lists.gnu.org/archive/html/gnutls-devel/2009-11/msg00029.html"
},
{
"type": "WEB",
"url": "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00009.html"
},
{
"type": "WEB",
"url": "http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00001.html"
},
{
"type": "WEB",
"url": "http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html"
},
{
"type": "WEB",
"url": "http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00002.html"
},
{
"type": "WEB",
"url": "http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html"
},
{
"type": "WEB",
"url": "http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html"
},
{
"type": "WEB",
"url": "http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00005.html"
},
{
"type": "WEB",
"url": "http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html"
},
{
"type": "WEB",
"url": "http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00013.html"
},
{
"type": "WEB",
"url": "http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00014.html"
},
{
"type": "WEB",
"url": "http://marc.info/?l=apache-httpd-announce\u0026m=125755783724966\u0026w=2"
},
{
"type": "WEB",
"url": "http://marc.info/?l=bugtraq\u0026m=126150535619567\u0026w=2"
},
{
"type": "WEB",
"url": "http://marc.info/?l=bugtraq\u0026m=127128920008563\u0026w=2"
},
{
"type": "WEB",
"url": "http://marc.info/?l=bugtraq\u0026m=127419602507642\u0026w=2"
},
{
"type": "WEB",
"url": "http://marc.info/?l=bugtraq\u0026m=127557596201693\u0026w=2"
},
{
"type": "WEB",
"url": "http://marc.info/?l=bugtraq\u0026m=130497311408250\u0026w=2"
},
{
"type": "WEB",
"url": "http://marc.info/?l=bugtraq\u0026m=132077688910227\u0026w=2"
},
{
"type": "WEB",
"url": "http://marc.info/?l=bugtraq\u0026m=133469267822771\u0026w=2"
},
{
"type": "WEB",
"url": "http://marc.info/?l=bugtraq\u0026m=134254866602253\u0026w=2"
},
{
"type": "WEB",
"url": "http://marc.info/?l=bugtraq\u0026m=142660345230545\u0026w=2"
},
{
"type": "WEB",
"url": "http://marc.info/?l=cryptography\u0026m=125752275331877\u0026w=2"
},
{
"type": "WEB",
"url": "http://openbsd.org/errata45.html#010_openssl"
},
{
"type": "WEB",
"url": "http://openbsd.org/errata46.html#004_openssl"
},
{
"type": "WEB",
"url": "http://seclists.org/fulldisclosure/2009/Nov/139"
},
{
"type": "WEB",
"url": "http://security.gentoo.org/glsa/glsa-200912-01.xml"
},
{
"type": "WEB",
"url": "http://security.gentoo.org/glsa/glsa-201203-22.xml"
},
{
"type": "WEB",
"url": "http://security.gentoo.org/glsa/glsa-201406-32.xml"
},
{
"type": "WEB",
"url": "http://securitytracker.com/id?1023148"
},
{
"type": "WEB",
"url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2009\u0026m=slackware-security.597446"
},
{
"type": "WEB",
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-273350-1"
},
{
"type": "WEB",
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-273029-1"
},
{
"type": "WEB",
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-274990-1"
},
{
"type": "WEB",
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021653.1-1"
},
{
"type": "WEB",
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021752.1-1"
},
{
"type": "WEB",
"url": "http://support.apple.com/kb/HT4004"
},
{
"type": "WEB",
"url": "http://support.apple.com/kb/HT4170"
},
{
"type": "WEB",
"url": "http://support.apple.com/kb/HT4171"
},
{
"type": "WEB",
"url": "http://support.avaya.com/css/P8/documents/100070150"
},
{
"type": "WEB",
"url": "http://support.avaya.com/css/P8/documents/100081611"
},
{
"type": "WEB",
"url": "http://support.avaya.com/css/P8/documents/100114315"
},
{
"type": "WEB",
"url": "http://support.avaya.com/css/P8/documents/100114327"
},
{
"type": "WEB",
"url": "http://support.citrix.com/article/CTX123359"
},
{
"type": "WEB",
"url": "http://support.zeus.com/zws/media/docs/4.3/RELEASE_NOTES"
},
{
"type": "WEB",
"url": "http://support.zeus.com/zws/news/2010/01/13/zws_4_3r5_released"
},
{
"type": "WEB",
"url": "http://sysoev.ru/nginx/patch.cve-2009-3555.txt"
},
{
"type": "WEB",
"url": "http://tomcat.apache.org/native-doc/miscellaneous/changelog-1.1.x.html"
},
{
"type": "WEB",
"url": "http://ubuntu.com/usn/usn-923-1"
},
{
"type": "WEB",
"url": "http://wiki.rpath.com/Advisories:rPSA-2009-0155"
},
{
"type": "WEB",
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg1IC67848"
},
{
"type": "WEB",
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg1IC68054"
},
{
"type": "WEB",
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg1IC68055"
},
{
"type": "WEB",
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg1PM12247"
},
{
"type": "WEB",
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21426108"
},
{
"type": "WEB",
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21432298"
},
{
"type": "WEB",
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg24006386"
},
{
"type": "WEB",
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg24025312"
},
{
"type": "WEB",
"url": "http://www-1.ibm.com/support/search.wss?rs=0\u0026q=PM00675\u0026apar=only"
},
{
"type": "WEB",
"url": "http://www.arubanetworks.com/support/alerts/aid-020810.txt"
},
{
"type": "WEB",
"url": "http://www.betanews.com/article/1257452450"
},
{
"type": "WEB",
"url": "http://www.cisco.com/en/US/products/products_security_advisory09186a0080b01d1d.shtml"
},
{
"type": "WEB",
"url": "http://www.debian.org/security/2009/dsa-1934"
},
{
"type": "WEB",
"url": "http://www.debian.org/security/2011/dsa-2141"
},
{
"type": "WEB",
"url": "http://www.debian.org/security/2015/dsa-3253"
},
{
"type": "WEB",
"url": "http://www.educatedguesswork.org/2009/11/understanding_the_tls_renegoti.html"
},
{
"type": "WEB",
"url": "http://www.hitachi.co.jp/Prod/comp/soft1/security/info/vuls/HS10-030/index.html"
},
{
"type": "WEB",
"url": "http://www.ietf.org/mail-archive/web/tls/current/msg03928.html"
},
{
"type": "WEB",
"url": "http://www.ietf.org/mail-archive/web/tls/current/msg03948.html"
},
{
"type": "WEB",
"url": "http://www.ingate.com/Relnote.php?ver=481"
},
{
"type": "WEB",
"url": "http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02512995"
},
{
"type": "WEB",
"url": "http://www.kb.cert.org/vuls/id/120541"
},
{
"type": "WEB",
"url": "http://www.links.org/?p=780"
},
{
"type": "WEB",
"url": "http://www.links.org/?p=786"
},
{
"type": "WEB",
"url": "http://www.links.org/?p=789"
},
{
"type": "WEB",
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:076"
},
{
"type": "WEB",
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:084"
},
{
"type": "WEB",
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:089"
},
{
"type": "WEB",
"url": "http://www.mozilla.org/security/announce/2010/mfsa2010-22.html"
},
{
"type": "WEB",
"url": "http://www.openoffice.org/security/cves/CVE-2009-3555.html"
},
{
"type": "WEB",
"url": "http://www.openssl.org/news/secadv_20091111.txt"
},
{
"type": "WEB",
"url": "http://www.openwall.com/lists/oss-security/2009/11/05/3"
},
{
"type": "WEB",
"url": "http://www.openwall.com/lists/oss-security/2009/11/05/5"
},
{
"type": "WEB",
"url": "http://www.openwall.com/lists/oss-security/2009/11/06/3"
},
{
"type": "WEB",
"url": "http://www.openwall.com/lists/oss-security/2009/11/07/3"
},
{
"type": "WEB",
"url": "http://www.openwall.com/lists/oss-security/2009/11/20/1"
},
{
"type": "WEB",
"url": "http://www.openwall.com/lists/oss-security/2009/11/23/10"
},
{
"type": "WEB",
"url": "http://www.opera.com/docs/changelogs/unix/1060"
},
{
"type": "WEB",
"url": "http://www.opera.com/support/search/view/944"
},
{
"type": "WEB",
"url": "http://www.oracle.com/technetwork/topics/security/cpuapr2011-301950.html"
},
{
"type": "WEB",
"url": "http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html"
},
{
"type": "WEB",
"url": "http://www.oracle.com/technetwork/topics/security/javacpuoct2010-176258.html"
},
{
"type": "WEB",
"url": "http://www.proftpd.org/docs/RELEASE_NOTES-1.3.2c"
},
{
"type": "WEB",
"url": "http://www.redhat.com/support/errata/RHSA-2010-0119.html"
},
{
"type": "WEB",
"url": "http://www.redhat.com/support/errata/RHSA-2010-0130.html"
},
{
"type": "WEB",
"url": "http://www.redhat.com/support/errata/RHSA-2010-0155.html"
},
{
"type": "WEB",
"url": "http://www.redhat.com/support/errata/RHSA-2010-0165.html"
},
{
"type": "WEB",
"url": "http://www.redhat.com/support/errata/RHSA-2010-0167.html"
},
{
"type": "WEB",
"url": "http://www.redhat.com/support/errata/RHSA-2010-0337.html"
},
{
"type": "WEB",
"url": "http://www.redhat.com/support/errata/RHSA-2010-0338.html"
},
{
"type": "WEB",
"url": "http://www.redhat.com/support/errata/RHSA-2010-0339.html"
},
{
"type": "WEB",
"url": "http://www.redhat.com/support/errata/RHSA-2010-0768.html"
},
{
"type": "WEB",
"url": "http://www.redhat.com/support/errata/RHSA-2010-0770.html"
},
{
"type": "WEB",
"url": "http://www.redhat.com/support/errata/RHSA-2010-0786.html"
},
{
"type": "WEB",
"url": "http://www.redhat.com/support/errata/RHSA-2010-0807.html"
},
{
"type": "WEB",
"url": "http://www.redhat.com/support/errata/RHSA-2010-0865.html"
},
{
"type": "WEB",
"url": "http://www.redhat.com/support/errata/RHSA-2010-0986.html"
},
{
"type": "WEB",
"url": "http://www.redhat.com/support/errata/RHSA-2010-0987.html"
},
{
"type": "WEB",
"url": "http://www.redhat.com/support/errata/RHSA-2011-0880.html"
},
{
"type": "WEB",
"url": "http://www.securegoose.org/2009/11/tls-renegotiation-vulnerability-cve.html"
},
{
"type": "WEB",
"url": "http://www.securityfocus.com/archive/1/507952/100/0/threaded"
},
{
"type": "WEB",
"url": "http://www.securityfocus.com/archive/1/508075/100/0/threaded"
},
{
"type": "WEB",
"url": "http://www.securityfocus.com/archive/1/508130/100/0/threaded"
},
{
"type": "WEB",
"url": "http://www.securityfocus.com/archive/1/515055/100/0/threaded"
},
{
"type": "WEB",
"url": "http://www.securityfocus.com/archive/1/516397/100/0/threaded"
},
{
"type": "WEB",
"url": "http://www.securityfocus.com/archive/1/522176"
},
{
"type": "WEB",
"url": "http://www.securityfocus.com/bid/36935"
},
{
"type": "WEB",
"url": "http://www.securitytracker.com/id?1023163"
},
{
"type": "WEB",
"url": "http://www.securitytracker.com/id?1023204"
},
{
"type": "WEB",
"url": "http://www.securitytracker.com/id?1023205"
},
{
"type": "WEB",
"url": "http://www.securitytracker.com/id?1023206"
},
{
"type": "WEB",
"url": "http://www.securitytracker.com/id?1023207"
},
{
"type": "WEB",
"url": "http://www.securitytracker.com/id?1023208"
},
{
"type": "WEB",
"url": "http://www.securitytracker.com/id?1023209"
},
{
"type": "WEB",
"url": "http://www.securitytracker.com/id?1023210"
},
{
"type": "WEB",
"url": "http://www.securitytracker.com/id?1023211"
},
{
"type": "WEB",
"url": "http://www.securitytracker.com/id?1023212"
},
{
"type": "WEB",
"url": "http://www.securitytracker.com/id?1023213"
},
{
"type": "WEB",
"url": "http://www.securitytracker.com/id?1023214"
},
{
"type": "WEB",
"url": "http://www.securitytracker.com/id?1023215"
},
{
"type": "WEB",
"url": "http://www.securitytracker.com/id?1023216"
},
{
"type": "WEB",
"url": "http://www.securitytracker.com/id?1023217"
},
{
"type": "WEB",
"url": "http://www.securitytracker.com/id?1023218"
},
{
"type": "WEB",
"url": "http://www.securitytracker.com/id?1023219"
},
{
"type": "WEB",
"url": "http://www.securitytracker.com/id?1023224"
},
{
"type": "WEB",
"url": "http://www.securitytracker.com/id?1023243"
},
{
"type": "WEB",
"url": "http://www.securitytracker.com/id?1023270"
},
{
"type": "WEB",
"url": "http://www.securitytracker.com/id?1023271"
},
{
"type": "WEB",
"url": "http://www.securitytracker.com/id?1023272"
},
{
"type": "WEB",
"url": "http://www.securitytracker.com/id?1023273"
},
{
"type": "WEB",
"url": "http://www.securitytracker.com/id?1023274"
},
{
"type": "WEB",
"url": "http://www.securitytracker.com/id?1023275"
},
{
"type": "WEB",
"url": "http://www.securitytracker.com/id?1023411"
},
{
"type": "WEB",
"url": "http://www.securitytracker.com/id?1023426"
},
{
"type": "WEB",
"url": "http://www.securitytracker.com/id?1023427"
},
{
"type": "WEB",
"url": "http://www.securitytracker.com/id?1023428"
},
{
"type": "WEB",
"url": "http://www.securitytracker.com/id?1024789"
},
{
"type": "WEB",
"url": "http://www.tombom.co.uk/blog/?p=85"
},
{
"type": "WEB",
"url": "http://www.ubuntu.com/usn/USN-1010-1"
},
{
"type": "WEB",
"url": "http://www.ubuntu.com/usn/USN-927-1"
},
{
"type": "WEB",
"url": "http://www.ubuntu.com/usn/USN-927-4"
},
{
"type": "WEB",
"url": "http://www.ubuntu.com/usn/USN-927-5"
},
{
"type": "WEB",
"url": "http://www.us-cert.gov/cas/techalerts/TA10-222A.html"
},
{
"type": "WEB",
"url": "http://www.us-cert.gov/cas/techalerts/TA10-287A.html"
},
{
"type": "WEB",
"url": "http://www.vmware.com/security/advisories/VMSA-2010-0019.html"
},
{
"type": "WEB",
"url": "http://www.vmware.com/security/advisories/VMSA-2011-0003.html"
},
{
"type": "WEB",
"url": "http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html"
},
{
"type": "WEB",
"url": "http://xss.cx/examples/plesk-reports/plesk-parallels-controlpanel-psa.v.10.3.1_build1013110726.09%20os_redhat.el6-billing-system-plugin-javascript-injection-example-poc-report.html"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
}
],
"summary": "Apache Tomcat affected by vulnerability in TLS and SSL protocol"
}
GHSA-F82C-2MG8-7M73
Vulnerability from github – Published: 2022-05-24 17:05 – Updated: 2024-04-04 02:45
VLAI
Details
The NTV News24 prior to Ver.3.0.0 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
Severity
7.4 (High)
{
"affected": [],
"aliases": [
"CVE-2019-6032"
],
"database_specific": {
"cwe_ids": [
"CWE-295"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2019-12-26T16:15:00Z",
"severity": "HIGH"
},
"details": "The NTV News24 prior to Ver.3.0.0 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.",
"id": "GHSA-f82c-2mg8-7m73",
"modified": "2024-04-04T02:45:45Z",
"published": "2022-05-24T17:05:08Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-6032"
},
{
"type": "WEB",
"url": "https://play.google.com/store/apps/details?id=jp.co.ntv.news24\u0026hl=en"
},
{
"type": "WEB",
"url": "http://jvn.jp/en/jp/JVN01236065/index.html"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"type": "CVSS_V3"
}
]
}
GHSA-F853-FJJ2-486W
Vulnerability from github – Published: 2022-05-17 02:46 – Updated: 2022-05-17 02:46
VLAI
Details
The Access CX App for Android prior to 2.0.0.1 and for iOS prior to 2.0.2 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
Severity
5.9 (Medium)
{
"affected": [],
"aliases": [
"CVE-2017-2110"
],
"database_specific": {
"cwe_ids": [
"CWE-295"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2017-04-28T16:59:00Z",
"severity": "MODERATE"
},
"details": "The Access CX App for Android prior to 2.0.0.1 and for iOS prior to 2.0.2 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.",
"id": "GHSA-f853-fjj2-486w",
"modified": "2022-05-17T02:46:13Z",
"published": "2022-05-17T02:46:13Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-2110"
},
{
"type": "WEB",
"url": "http://jvn.jp/en/jp/JVN82619692/index.html"
},
{
"type": "WEB",
"url": "http://www.securityfocus.com/bid/96615"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"type": "CVSS_V3"
}
]
}
GHSA-F9J6-QH7X-56FV
Vulnerability from github – Published: 2025-02-26 21:30 – Updated: 2025-03-05 00:30
VLAI
Details
SunGrow iSolarCloud Android app V2.1.6.20241104 and prior suffers from Missing SSL Certificate Validation. The app explicitly ignores certificate errors and is vulnerable to MiTM attacks. Attackers can impersonate the iSolarCloud server and communicate with the Android app.
Severity
7.4 (High)
{
"affected": [],
"aliases": [
"CVE-2024-50691"
],
"database_specific": {
"cwe_ids": [
"CWE-295"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-02-26T21:15:17Z",
"severity": "HIGH"
},
"details": "SunGrow iSolarCloud Android app V2.1.6.20241104 and prior suffers from Missing SSL Certificate Validation. The app explicitly ignores certificate errors and is vulnerable to MiTM attacks. Attackers can impersonate the iSolarCloud server and communicate with the Android app.",
"id": "GHSA-f9j6-qh7x-56fv",
"modified": "2025-03-05T00:30:33Z",
"published": "2025-02-26T21:30:32Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-50691"
},
{
"type": "WEB",
"url": "https://en.sungrowpower.com/security-notice-detail-2/6124"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"type": "CVSS_V3"
}
]
}
GHSA-F9MX-3GV3-XR48
Vulnerability from github – Published: 2025-01-10 18:31 – Updated: 2025-01-13 21:30
VLAI
Details
An issue in CP Plus CP-VNR-3104 B3223P22C02424 allows attackers to obtain the second RSA private key and access sensitive data or execute a man-in-the-middle attack.
Severity
5.9 (Medium)
{
"affected": [],
"aliases": [
"CVE-2024-54849"
],
"database_specific": {
"cwe_ids": [
"CWE-295"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-01-10T17:15:17Z",
"severity": "MODERATE"
},
"details": "An issue in CP Plus CP-VNR-3104 B3223P22C02424 allows attackers to obtain the second RSA private key and access sensitive data or execute a man-in-the-middle attack.",
"id": "GHSA-f9mx-3gv3-xr48",
"modified": "2025-01-13T21:30:52Z",
"published": "2025-01-10T18:31:41Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-15522"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-54849"
},
{
"type": "WEB",
"url": "https://payatu.com/blog/solving-the-problem-of-encrypted-firmware"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"type": "CVSS_V3"
}
]
}
GHSA-FCJM-R5RJ-FQ7W
Vulnerability from github – Published: 2022-05-24 17:31 – Updated: 2022-05-24 17:31
VLAI
Details
In Network Security Services before 3.44, a malformed Netscape Certificate Sequence can cause NSS to crash, resulting in a denial of service.
{
"affected": [],
"aliases": [
"CVE-2019-17007"
],
"database_specific": {
"cwe_ids": [
"CWE-295"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2020-10-22T21:15:00Z",
"severity": "HIGH"
},
"details": "In Network Security Services before 3.44, a malformed Netscape Certificate Sequence can cause NSS to crash, resulting in a denial of service.",
"id": "GHSA-fcjm-r5rj-fq7w",
"modified": "2022-05-24T17:31:55Z",
"published": "2022-05-24T17:31:55Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-17007"
},
{
"type": "WEB",
"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1533216"
},
{
"type": "WEB",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-379803.pdf"
},
{
"type": "WEB",
"url": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.44_release_notes"
},
{
"type": "WEB",
"url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-040-04"
}
],
"schema_version": "1.4.0",
"severity": []
}
Mitigation
Architecture and Design
Implementation
Certificates should be carefully managed and checked to assure that data are encrypted with the intended owner's public key.
Mitigation
Implementation
If certificate pinning is being used, ensure that all relevant properties of the certificate are fully validated before the certificate is pinned, including the hostname.
CAPEC-459: Creating a Rogue Certification Authority Certificate
An adversary exploits a weakness resulting from using a hashing algorithm with weak collision resistance to generate certificate signing requests (CSR) that contain collision blocks in their "to be signed" parts. The adversary submits one CSR to be signed by a trusted certificate authority then uses the signed blob to make a second certificate appear signed by said certificate authority. Due to the hash collision, both certificates, though different, hash to the same value and so the signed blob works just as well in the second certificate. The net effect is that the adversary's second X.509 certificate, which the Certification Authority has never seen, is now signed and validated by that Certification Authority.
CAPEC-475: Signature Spoofing by Improper Validation
An adversary exploits a cryptographic weakness in the signature verification algorithm implementation to generate a valid signature without knowing the key.