CVE-2023-5594CWE-295

Improper following of a certificate's chain of trust in ESET security products

High · published December 21, 2023

CVSS v3.1
7.5
EPSS
0%
Percentile
30.3
In the wild
Unconfirmed
What it is

Improper validation of the server’s certificate chain in secure traffic scanning feature considered intermediate certificate signed using the MD5 or SHA1 algorithm as trusted.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00376 · 30.3th percentile
Weakness
CWE-295 · Improper Certificate Validation
Published
2023-12-21T11:30Z
EPSS history
Timeline
  • 21 DEC 11:30Z
    Improper following of a certificate's chain of trust in ESET security products
    cvelistv5