CVE-2009-3291

The php_openssl_apply_verification_policy function in PHP before 5.2.11 does not properly perform certificate validation, which has unknown impact and attack…

published September 22, 2009

CVSS
—
EPSS
3%
Percentile
86.9
In the wild
Unconfirmed
What it is

The php_openssl_apply_verification_policy function in PHP before 5.2.11 does not properly perform certificate validation, which has unknown impact and attack vectors, probably related to an ability to spoof certificates.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02910 · 86.9th percentile
Published
2009-09-22T10:00Z
EPSS history
Timeline
  • 22 SEP 10:00Z
    The php_openssl_apply_verification_policy function in PHP before 5.2.11 does not properly perform certificate validation, which has unknown impact and attack…
    cvelistv5