CVE-2019-3762CWE-296

Data Protection Central versions 1.0, 1.0.1, 18.1, 18.2, and 19.1 contains an Improper Certificate Chain of Trust Vulnerability

High · published March 18, 2020

CVSS v3.0
7.5
EPSS
1%
Percentile
50.4
In the wild
Unconfirmed
What it is

Data Protection Central versions 1.0, 1.0.1, 18.1, 18.2, and 19.1 contains an Improper Certificate Chain of Trust Vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability by obtaining a CA signed certificate from Data Protection Central to impersonate a valid system to compromise the integrity of data.

The record
Technical detail
CVSS v3.0
7.5 · HIGH
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00648 · 50.4th percentile
Weakness
CWE-296 · Improper Following of a Certificate's Chain of Trust
Published
2020-03-18T18:20Z
EPSS history
Timeline
  • 18 MAR 18:20Z
    Data Protection Central versions 1.0, 1.0.1, 18.1, 18.2, and 19.1 contains an Improper Certificate Chain of Trust Vulnerability
    cvelistv5