Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9h5h-4q77-cphm

Опубликовано: 29 апр. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 4.8

Описание

wget2 accepts a server certificate with incorrect Key Usage (KU) or Extended Key Usage (EKU). If the attackers compromise a certificate (with the associated private key) issued for a different purpose, they may be able to reuse it for TLS server authentication.

wget2 accepts a server certificate with incorrect Key Usage (KU) or Extended Key Usage (EKU). If the attackers compromise a certificate (with the associated private key) issued for a different purpose, they may be able to reuse it for TLS server authentication.

EPSS

Процентиль: 5%
0.00155
Низкий

4.8 Medium

CVSS3

Дефекты

CWE-20

Связанные уязвимости

CVSS3: 4.8
ubuntu
5 месяцев назад

wget2 accepts a server certificate with incorrect Key Usage (KU) or Extended Key Usage (EKU). If the attackers compromise a certificate (with the associated private key) issued for a different purpose, they may be able to reuse it for TLS server authentication.

CVSS3: 4.8
nvd
5 месяцев назад

wget2 accepts a server certificate with incorrect Key Usage (KU) or Extended Key Usage (EKU). If the attackers compromise a certificate (with the associated private key) issued for a different purpose, they may be able to reuse it for TLS server authentication.

CVSS3: 4.8
debian
5 месяцев назад

wget2 accepts a server certificate with incorrect Key Usage (KU) or Ex ...

EPSS

Процентиль: 5%
0.00155
Низкий

4.8 Medium

CVSS3

Дефекты

CWE-20