CVE-2011-3422

The Keychain implementation in Apple Mac OS X 10.6.8 and earlier does not properly handle an untrusted attribute of a Certification Authority certificate…

published September 10, 2011

CVSS
—
EPSS
1%
Percentile
57.8
In the wild
Unconfirmed
What it is

The Keychain implementation in Apple Mac OS X 10.6.8 and earlier does not properly handle an untrusted attribute of a Certification Authority certificate, which makes it easier for man-in-the-middle attackers to spoof arbitrary SSL servers via an Extended Validation certificate, as demonstrated by https access with Safari.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00857 · 57.8th percentile
Published
2011-09-10T00:00Z
EPSS history
Timeline
  • 10 SEP 00:00Z
    The Keychain implementation in Apple Mac OS X 10.6.8 and earlier does not properly handle an untrusted attribute of a Certification Authority certificate…
    cvelistv5