Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
opensslOpenSSLOPENSSL:CVE-2023-0466
HistoryMar 21, 2023 - 12:00 a.m.

Vulnerability in OpenSSL CVE-2023-0466

2023-03-2100:00:00
www.openssl.org
26

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

47.3%

JSON
The function X509_VERIFY_PARAM_add0_policy() is documented to implicitly enable the certificate policy check when doing certificate verification. However the implementation of the function does not enable the check which allows certificates with invalid or incorrect policies to pass the certificate verification.

Related

cvelist 2
debiancve 2
redhatcve 1
veracode 1
cbl_mariner 2
alpinelinux 2
ubuntucve 2
osv 6
prion 2
cve 2
nessus 60
f5 1
ibm 30
openvas 41
freebsd 2
cloudlinux 1
amazon 4
debian 2
cloudfoundry 1
ubuntu 1
almalinux 1
oraclelinux 2
fedora 2
redhat 12
rosalinux 1
aix 1
mageia 1
gentoo 1
photon 3
ics 3
hp 1
tenable 1
oracle 4
cvelist
cvelist
CVE-2023-0466 Certificate policy check not enabled
2023-03-28 14:30:49
CVE-2022-3996 X.509 Policy Constraints Double Locking
2022-12-13 15:43:06
debiancve
debiancve
CVE-2023-0466
2023-03-28 15:15:06
CVE-2022-3996
2022-12-13 16:15:00
redhatcve
redhatcve
CVE-2023-0466
2023-03-30 09:13:38
veracode
veracode
Authorization Bypass
2023-04-02 10:15:03
cbl_mariner
cbl_mariner
CVE-2023-0466 affecting package openssl 1.1.1k-13
2023-04-20 19:17:28
CVE-2023-0466 affecting package openssl for versions less than 1.1.1k-23
2023-05-03 16:09:09
alpinelinux
alpinelinux
CVE-2023-0466
2023-03-28 15:15:06
CVE-2022-3996
2022-12-13 16:15:00
ubuntucve
ubuntucve
CVE-2023-0466
2023-03-28 00:00:00
CVE-2022-3996
2022-12-13 00:00:00
osv
osv
CVE-2023-0466
2023-03-28 15:15:06
CVE-2022-3996
2022-12-13 16:15:22
openssl - security update
2023-06-08 00:00:00
prion
prion
Design/Logic Flaw
2023-03-28 15:15:00
Design/Logic Flaw
2022-12-13 16:15:00
cve
cve
CVE-2023-0466
2023-03-28 15:15:06
CVE-2022-3996
2022-12-13 16:15:00
nessus
nessus
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : openssl-1_1 (SUSE-SU-2023:1911-1)
2023-04-20 00:00:00
SUSE SLES15 / openSUSE 15 Security Update : openssl-1_0_0 (SUSE-SU-2023:1922-1)
2023-04-20 00:00:00
SUSE SLES12 Security Update : openssl (SUSE-SU-2023:1907-1)
2023-04-20 00:00:00
f5
f5
K000134574 : OpenSSL vulnerabilities CVE-2023-0465 and CVE-2023-0466
2023-05-11 00:00:00
ibm
ibm
Security Bulletin: Vulnerability in FOS firmware used by IBM b-type SAN directors and switches.
2024-05-01 21:19:39
Security Bulletin: Vulnerability in NX-OS Firmware used by IBM c-type SAN directors and switches.
2024-03-28 19:47:18
Security Bulletin: IBM InfoSphere Information Server is affected by multiple vulnerabilities in OpenSSL
2024-03-19 23:16:09
openvas
openvas
Huawei EulerOS: Security Advisory for openssl (EulerOS-SA-2023-2317)
2023-07-10 00:00:00
SUSE: Security Advisory (SUSE-SU-2023:1907-1)
2023-04-20 00:00:00
SUSE: Security Advisory (SUSE-SU-2023:1908-1)
2023-04-20 00:00:00
freebsd
freebsd
OpenSSL -- Multiple vulnerabilities
2023-03-28 00:00:00
Python -- multiple vulnerabilities
2022-06-08 00:00:00
cloudlinux
cloudlinux
openssl: Fix of 3 CVEs
2023-05-04 21:42:17
amazon
amazon
Medium: openssl11
2023-05-11 17:49:00
Medium: openssl
2023-06-05 16:39:00
Medium: openssl
2023-06-05 16:39:00
debian
debian
[SECURITY] [DLA 3449-1] openssl security update
2023-06-08 16:32:59
[SECURITY] [DSA 5417-1] openssl security update
2023-05-31 14:51:05
cloudfoundry
cloudfoundry
USN-6039-1: OpenSSL vulnerabilities | Cloud Foundry
2023-06-30 00:00:00
ubuntu
ubuntu
OpenSSL vulnerabilities
2023-04-25 00:00:00
almalinux
almalinux
Moderate: openssl security and bug fix update
2023-06-21 00:00:00
oraclelinux
oraclelinux
openssl security update
2023-08-31 00:00:00
openssl security and bug fix update
2023-06-22 00:00:00
fedora
fedora
[SECURITY] Fedora 38 Update: openssl-3.0.9-1.fc38
2023-06-03 02:46:16
[SECURITY] Fedora 37 Update: openssl-3.0.9-1.fc37
2023-06-04 01:24:09
redhat
redhat
(RHSA-2023:3722) Moderate: openssl security and bug fix update
2023-06-21 13:52:15
(RHSA-2023:7622) Moderate: Red Hat JBoss Web Server 5.7.7 release and security update
2023-12-07 12:13:40
(RHSA-2023:7623) Moderate: Red Hat JBoss Web Server 5.7.7 release and security update
2023-12-07 12:35:41
rosalinux
rosalinux
Advisory ROSA-SA-2024-2366
2024-03-05 08:46:27
aix
aix
Multiple vulnerabilities in OpenSSL affect AIX
2023-09-11 10:43:54
mageia
mageia
Updated openssl packages fix security vulnerability
2023-04-11 22:02:20
gentoo
gentoo
OpenSSL: Multiple Vulnerabilities
2024-02-04 00:00:00
photon
photon
Critical Photon OS Security Update - PHSA-2023-4.0-0415
2023-06-22 00:00:00
Important Photon OS Security Update - PHSA-2023-5.0-0041
2023-06-29 00:00:00
Critical Photon OS Security Update - PHSA-2023-3.0-0602
2023-06-21 00:00:00
ics
ics
Siemens Telecontrol Server Basic
2024-04-11 12:00:00
Siemens SIMATIC S7-1500 TM MFP Linux Kernel
2023-06-15 12:00:00
Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1
2023-12-14 12:00:00
hp
hp
HP Device Manager Security Updates
2023-10-20 00:00:00
tenable
tenable
[R1] Nessus Network Monitor 6.2.2 Fixes Multiple Vulnerabilities
2023-06-29 10:45:47
oracle
oracle
Oracle Critical Patch Update Advisory - October 2023
2023-10-17 00:00:00
Oracle Critical Patch Update Advisory - January 2024
2024-01-16 00:00:00
Oracle Critical Patch Update Advisory - July 2023
2023-07-18 00:00:00

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

47.3%

JSON
Related for OPENSSL:CVE-2023-0466
cvelist2debiancve2redhatcve1veracode1cbl_mariner2alpinelinux2ubuntucve2osv6prion2cve2nessus60f51ibm30openvas41freebsd2cloudlinux1amazon4debian2cloudfoundry1ubuntu1almalinux1oraclelinux2fedora2redhat12rosalinux1aix1mageia1gentoo1photon3ics3hp1tenable1oracle4