Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-94qf-5827-9224

Опубликовано: 30 апр. 2022
Источник: github
Github: Не прошло ревью

Описание

TinySSL 1.02 and earlier does not verify the Basic Constraints for an intermediate CA-signed certificate, which allows remote attackers to spoof the certificates of trusted sites via a man-in-the-middle attack.

TinySSL 1.02 and earlier does not verify the Basic Constraints for an intermediate CA-signed certificate, which allows remote attackers to spoof the certificates of trusted sites via a man-in-the-middle attack.

EPSS

Процентиль: 64%
0.00479
Низкий

Связанные уязвимости

nvd
больше 22 лет назад

TinySSL 1.02 and earlier does not verify the Basic Constraints for an intermediate CA-signed certificate, which allows remote attackers to spoof the certificates of trusted sites via a man-in-the-middle attack.

EPSS

Процентиль: 64%
0.00479
Низкий