PT-2022-28293

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue concerns X509 Certificate verification, which does not validate KeyUsages EKU requirements on Windows when VerifyOptions.Roots is nil. Recommendations At the moment, there is no...

Design/Logic Flaw

In Go before 1.13.13 and 1.14.x before 1.14.5, Certificate.Verify may lack a check on the VerifyOptions.KeyUsages EKU requirements if VerifyOptions.Roots equals nil and the installation is on Windows. Thus, X.509 certificate verification is incomplete...