CVE-2021-40855

2022-01-2115:33:20

mitre

www.cve.org

digital

security

certificates

issue

AI Score

9.7

Confidence

High

EPSS

0.002

Percentile

51.3%

JSON

The EU Technical Specifications for Digital COVID Certificates before 1.1 mishandle certificate governance. A non-production public key certificate could have been used in production.

References

github.com/eu-digital-green-certificates/dgc-overview/security/advisories/GHSA-xcvc-p4fw-qmcj

www.consilium.europa.eu/en/policies/coronavirus/eu-digital-covid-certificate/