The vulnerability of the SoC application platform for Visteon Infotainment applications allows a violator to bypass authentication procedures and gain increased privileges.

The vulnerability of the SoC platform for Visteon Infotainment applications is related to the absence of a fixed root certificate in the equipment. Exploiting this vulnerability allows an attacker to bypass authentication procedures and gain increased privileges...

The vulnerability of the SSL Certificate reliability checking package lies in the insufficient verification of data authenticity, allowing attackers to influence the integrity of the protected information.

The vulnerability of the SSL certificate integrity checking package is related to insufficient verification of data authenticity during the processing of the GLOBALTRUST root certificate. Exploiting this vulnerability could allow a malicious actor to influence the integrity of the protected...

Security Bulletin: Vulnerability in Certifi python-certifi

Summary Certifi python-certifi could provide weaker than expected security, caused by the use of GLOBALTRUST root certificate. This can affect watsonx.data. Vulnerability Details CVEID:CVE-2024-39689 DESCRIPTION: Certifi python-certifi could provide weaker than expected security, caused by the us...

python-certifi: Removal of e-Tugra root certificate

A flaw was found in the python-certifi package. This issue occurs when the e-Tugra root certificate in Certifi is removed, resulting in an unspecified error that has an unknown impact and attack vector...

CVE-2024-6978 Cato Networks Windows SDP Client Local root certificates can be installed by low-privileged users

Cato Networks Windows SDP Client Local root certificates can be installed by low-privileged users.This issue affects SDP Client: before 5.10.28...

Cato Networks Windows SDP Client 安全漏洞

Cato Networks Windows SDP Client is a secure remote access software from Cato Networks, Israel. A security vulnerability exists in Cato Networks Windows SDP Client versions prior to 5.10.34 that stems from a local root certificate that can be installed by a user with low privileges...

Python Library Certifi < 2024.07.04 Untrusted Root Certificate

The detected version of Certifi python package, certifi, is prior to version 2024.07.04. Therefore, it contains untrusted root certificates from GLOBALTRUST. An unauthenticated, remote attacker can exploit this to gain arbitrary permissions within the application. Note that Nessus has not tested...

Certifi removes GLOBALTRUST root certificate

Certifi 2024.07.04 removes root certificates from "GLOBALTRUST" from the root store. These are in the process of being removed from Mozilla's trust store. GLOBALTRUST's root certificates are being removed pursuant to an investigation which identified "long-running and unresolved compliance issues...

GHSA-248V-346W-9CWC Certifi removes GLOBALTRUST root certificate

Certifi 2024.07.04 removes root certificates from "GLOBALTRUST" from the root store. These are in the process of being removed from Mozilla's trust store. GLOBALTRUST's root certificates are being removed pursuant to an investigation which identified "long-running and unresolved compliance issues...

Certifi Data Forgery Issue Vulnerability

Certifi is a Python SSL certificate from the Certifi open source. A data forgery vulnerability exists in versions of Certifi prior to 2024.07.04, which stems from a compliance issue that recognizes root certificates from GLOBALTRUST...

PT-2024-6615

Name of the Vulnerable Software and Affected Versions: Certifi versions 2021.05.30 through 2024.07.03 Description: The issue is related to the insufficient validation of data when processing the GLOBALTRUST root certificate, which may allow a remote attacker to compromise the integrity of protect...

The vulnerability of the MICROprogramming software of the SIMATIC CN 4100 communication gateway lies in the absence of an immutable root certificate in the equipment. This allows a malicious actor to gain access to read or write data in the device’s file system.

The vulnerability of the SIMATIC CN 4100 communication gateway’s microprogramming software is related to the absence of an immutable trust root in the equipment. Exploiting this vulnerability can allow attackers to gain access to read or write data in the device’s file system through an unlimited...

CVE-2024-0949

Missing Authentication, Files or Directories Accessible to External Parties, Use of Hard-coded Credentials vulnerability in Talya Informatics Elektraweb allows Authentication Bypass. This issue affects Elektraweb: before v17.0.68...

CVE-2024-0949 Improper Access Control in Talya Informatics' Elektraweb

Missing Authentication, Files or Directories Accessible to External Parties, Use of Hard-coded Credentials vulnerability in Talya Informatics Elektraweb allows Authentication Bypass. This issue affects Elektraweb: before v17.0.68...

CVE-2024-0949

CVE-2024-0949 affects Talya Informatics’ Elektraweb prior to 17.0.68. The issue is described as Missing Authentication and Use of Hard-coded Credentials that enables Authentication Bypass due to improper access control, potentially exposing files/directories externally and impacting confidentiali...

PT-2024-15930

Name of the Vulnerable Software and Affected Versions Elektraweb versions prior to 17.0.68 Description The issue is related to improper access control, missing authorization, and incorrect permission assignment for critical resources. It allows for exploiting incorrectly configured access control...

RHEL 9 : python-certifi (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 9 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - python-certifi: Removal of e-Tugra root certificate CVE-2023-37920 Note that Nessus has not tested for this issue b...

RHEL 7 : python-certifi (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - python-certifi: Removal of e-Tugra root certificate CVE-2023-37920 Note that Nessus has not tested for this issue b...

Security Bulletin: IBM Maximo Application Suite uses certifi-2023.5.7-py3-none-any.whl which is vulnerable to CVE-2023-37920

Summary IBM Maximo Application Suite uses certifi-2023.5.7-py3-none-any.whl which is vulnerable to CVE-2023-37920. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2023-37920 DESCRIPTION: An unspecified error with the removal of e-Tug...

PT-2024-20774 · Rustdesk · Rustdesk

Name of the Vulnerable Software and Affected Versions: RustDesk version 1.2.3 Description: A default installation of RustDesk on Windows places a WDKTestCert certificate under Trusted Root Certification Authorities with Enhanced Key Usage of Code Signing, valid from 2023 until 2033. This is...