CVE-2019-18633

2019-10-3022:15:10

Google

osv.dev

AI Score

6.8

Confidence

High

EPSS

0.003

Percentile

71.0%

JSON

European Commission eIDAS-Node Integration Package before 2.3.1 has Missing Certificate Validation because a certain ExplicitKeyTrustEvaluator return value is not checked. NOTE: only 2.1 is confirmed to be affected.

References

sec-consult.com/en/blog/advisories/15587/