CVE-2019-18633

2019-10-3021:16:47

mitre

www.cve.org

AI Score

9.4

Confidence

High

EPSS

0.003

Percentile

71.0%

JSON

European Commission eIDAS-Node Integration Package before 2.3.1 has Missing Certificate Validation because a certain ExplicitKeyTrustEvaluator return value is not checked. NOTE: only 2.1 is confirmed to be affected.

References

sec-consult.com/en/blog/advisories/15587/