AZL-34663 CVE-2023-0465 affecting package edk2 for versions less than 20230301gitf80f052277c8-37

🗓️ 28 Mar 2023 15:15:06Reported by GoogleType

osv🔗 osv.dev👁 6 Views

edk2 vulnerability allows a malicious certificate authority to bypass policy checks with non-default verification.

Reporter	Title	Published	Views	Family All 355
IBM Security Bulletins	Security Bulletin: Vulnerability in NX-OS Firmware used by IBM c-type SAN directors and switches.	28 Mar 202419:47	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities were identified in IBM Security Verify Access.	17 Jan 202415:16	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Rational Build Forge 8.0.0.25 addresses multiple vulnerabilities	24 Nov 202313:49	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar Wincollect is vulnerable to using components with known vulnerabilities	24 Jul 202317:54	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Spectrum Conductor openssl 1.1.1 End of Life	5 Oct 202320:31	–	ibm
IBM Security Bulletins	Security Bulletin: OpenSSL publicly disclosed vulnerabilities affect IBM® MobileFirst Platform	8 Aug 202310:37	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in FOS firmware used by IBM b-type SAN directors and switches.	1 May 202421:19	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Node.js, OpenSSL, trim, and Chalk ansi-regex module might affect IBM Storage Defender – Data Protect	31 Oct 202316:13	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in OpenSSL affects IBM Rational ClearCase.	3 Oct 202314:03	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple OpenSSL vulnerabilities affect IBM Safer Payments	28 Jul 202313:39	–	ibm

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-0465

21 Apr 2026 04:27Current

6.6Medium risk

Vulners AI Score6.6

CVSS 3.15.3

EPSS0.01583