Lucene search
HistoryOct 03, 2022 - 4:23 p.m.
CVE-2002-2125
internet explorer
expired certificate
ca
mitm attack
nvd
6.4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
6.8 Medium
AI Score
Confidence
Low
0.01 Low
EPSS
Percentile
83.6%
Internet Explorer 6.0 does not warn users when an expired certificate authority (CA) certificate is submitted to the user and a newer CA certificate is in the user’s local repository, which could allow remote attackers to decrypt web sessions via a man-in-the-middle (MITM) attack.
Affected configurations
Node
microsoftieMatch6.0sp1
ORmicrosoftinternet_explorerMatch6.0.2600
ORmicrosoftinternet_explorerMatch6.0.2800.1106
6.4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
6.8 Medium
AI Score
Confidence
Low
0.01 Low
EPSS
Percentile
83.6%
Related for CVE-2002-2125