CVE-2023-5594

Published Dec 21, 2023

Last updated 10 months ago

Overview

Description
Improper validation of the server’s certificate chain in secure traffic scanning feature considered intermediate certificate signed using the MD5 or SHA1 algorithm as trusted.
Source
security@eset.com
NVD status
Analyzed

Risk scores

CVSS 3.1

Type
Primary
Base score
8.6
Impact score
4
Exploitability score
3.9
Vector string
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Severity
HIGH

Weaknesses

nvd@nist.gov
CWE-295
security@eset.com
CWE-295

Social media

Hype score
Not currently trending

Configurations