CVE-2002-2125

Internet Explorer 6.0 does not warn users when an expired certificate authority (CA) certificate is submitted to the user and a newer CA certificate is in the…

published November 16, 2005

CVSS
—
EPSS
8%
Percentile
94.9
In the wild
Unconfirmed
What it is

Internet Explorer 6.0 does not warn users when an expired certificate authority (CA) certificate is submitted to the user and a newer CA certificate is in the user's local repository, which could allow remote attackers to decrypt web sessions via a man-in-the-middle (MITM) attack.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.08256 · 94.9th percentile
Published
2005-11-16T07:37Z
EPSS history
Timeline
  • 16 NOV 07:37Z
    Internet Explorer 6.0 does not warn users when an expired certificate authority (CA) certificate is submitted to the user and a newer CA certificate is in the…
    cvelistv5