Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: OpenSSL — openssl.org/news/secadv/20230328.txt Clear all filters
TI-2023-00441 CVE-2023-0466 · GHSA-pxvj-4wx4-gv6w

Certificate policy check not enabled

Priority LOW 28

The function X509_VERIFY_PARAM_add0_policy() is documented to implicitly enable the certificate policy check when doing certificate verification.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01772 Published 2023-03-28 Partial fix · 3.1.1, 3.0.9 +2 CWE-295
TI-2023-00440 CVE-2023-0465 · GHSA-77f3-6546-6rj7

Invalid certificate policies in leaf certificates are silently ignored

Priority LOW 34

Applications that use a non-default option when verifying certificates may be vulnerable to an attack from a malicious CA to circumvent certain checks.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01772 Published 2023-03-28 Partial fix · 3.1.1, 3.0.9 +2 CWE-295