CVE-2023-5594

🗓️ 21 Dec 2023 11:30:41Reported by ESETType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 49 Views

Improper validation of server’s certificate chain in secure traffic scanning featur

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2023-5594	21 Dec 202313:28	–	circl
CNNVD	Selected ESET Products Security Vulnerabilities	21 Dec 202300:00	–	cnnvd
Cvelist	CVE-2023-5594 Improper following of a certificate's chain of trust in ESET security products	21 Dec 202311:30	–	cvelist
EUVD	EUVD-2023-57887	3 Oct 202520:07	–	euvd
NVD	CVE-2023-5594	21 Dec 202312:15	–	nvd
OSV	CVE-2023-5594	21 Dec 202312:15	–	osv
Prion	Input validation	21 Dec 202312:15	–	prion
Positive Technologies	PT-2023-7999 · Eset · Eset Security For Microsoft Sharepoint Server +12	21 Dec 202300:00	–	ptsecurity

NVD

Node

eset endpoint_antivirusRange10.0≥linux

eset endpoint_antivirusMatch-windows

eset endpoint_securityMatch-windows

eset file_securityMatch-azure

eset internet_securityMatch-

eset mail_securityMatch-domino

eset mail_securityMatch-exchange_server

eset nod32_antivirusMatch-

eset securityMatch-sharepoint_server

eset securityMatch-ultimate

eset server_securityRange10.1≥linux

eset server_securityMatch-windows_server

eset smart_securityMatch-premium

[
  {
    "defaultStatus": "unaffected",
    "modules": [
      "Internet protection module"
    ],
    "product": "ESET NOD32 Antivirus",
    "vendor": "ESET, spol. s r.o.",
    "versions": [
      {
        "status": "unaffected",
        "version": "1464"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "modules": [
      "Internet protection module"
    ],
    "product": "ESET Internet Security",
    "vendor": "ESET, spol. s r.o.",
    "versions": [
      {
        "status": "unaffected",
        "version": "1464"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "modules": [
      "Internet protection module"
    ],
    "product": "ESET Smart Security Premium",
    "vendor": "ESET, spol. s r.o.",
    "versions": [
      {
        "status": "unaffected",
        "version": "1464"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "modules": [
      "Internet protection module"
    ],
    "product": "ESET Security Ultimate",
    "vendor": "ESET, spol. s r.o.",
    "versions": [
      {
        "status": "unaffected",
        "version": "1464"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "modules": [
      "Internet protection module"
    ],
    "product": "ESET Endpoint Antivirus",
    "vendor": "ESET, spol. s r.o.",
    "versions": [
      {
        "status": "unaffected",
        "version": "1464"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "modules": [
      "Internet protection module"
    ],
    "product": "ESET Endpoint Security",
    "vendor": "ESET, spol. s r.o.",
    "versions": [
      {
        "status": "unaffected",
        "version": "1464"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "modules": [
      "Internet protection module"
    ],
    "product": "ESET Endpoint Antivirus for Linux 10.0 and above",
    "vendor": "ESET, spol. s r.o.",
    "versions": [
      {
        "status": "unaffected",
        "version": "1464"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "modules": [
      "Internet protection module"
    ],
    "product": "ESET Server Security for Windows Server",
    "vendor": "ESET, spol. s r.o.",
    "versions": [
      {
        "status": "unaffected",
        "version": "1464"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "modules": [
      "Internet protection module"
    ],
    "product": "ESET Mail Security for Microsoft Exchange Server",
    "vendor": "ESET, spol. s r.o.",
    "versions": [
      {
        "status": "unaffected",
        "version": "1464"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "modules": [
      "Internet protection module"
    ],
    "product": "ESET Mail Security for IBM Domino",
    "vendor": "ESET, spol. s r.o.",
    "versions": [
      {
        "status": "unaffected",
        "version": "1464"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "modules": [
      "Internet protection module"
    ],
    "product": "ESET Security for Microsoft SharePoint Server",
    "vendor": "ESET, spol. s r.o.",
    "versions": [
      {
        "status": "unaffected",
        "version": "1464"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "modules": [
      "Internet protection module"
    ],
    "product": "ESET File Security for Microsoft Azure",
    "vendor": "ESET, spol. s r.o.",
    "versions": [
      {
        "status": "unaffected",
        "version": "1464"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "modules": [
      "Internet protection module"
    ],
    "product": "ESET Server Security for Linux 10.1 and above ",
    "vendor": "ESET, spol. s r.o.",
    "versions": [
      {
        "status": "unaffected",
        "version": "1464"
      }
    ]
  }
]

Source	Link
support	www.support.eset.com/en/ca8562-eset-customer-advisory-improper-following-of-a-certificates-chain-of-trust-in-eset-security-products-fixed

21 Nov 2024 08:42Current

8.1High risk

Vulners AI Score8.1

CVSS 3.17.5 - 8.6

EPSS0.00102

CWE-295