Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-vvp7-qf5p-r677

Опубликовано: 16 фев. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

In ca-certificates, there is a possible way to read encrypted TLS data due to untrusted cryptographic certificates. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

In ca-certificates, there is a possible way to read encrypted TLS data due to untrusted cryptographic certificates. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

EPSS

Процентиль: 45%
0.00224
Низкий

7.5 High

CVSS3

Дефекты

CWE-295

Связанные уязвимости

CVSS3: 7.5
nvd
почти 2 года назад

In ca-certificates, there is a possible way to read encrypted TLS data due to untrusted cryptographic certificates. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

EPSS

Процентиль: 45%
0.00224
Низкий

7.5 High

CVSS3

Дефекты

CWE-295