CVE-2023-21265

In multiple locations, there are root CA certificates which need to be disabled. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-21265

In multiple locations, there are root CA certificates which need to be disabled. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-21265

CVE-2023-21265 affects Android’s trust management by listing multiple root CA certificates that must be disabled. The underlying issue enables remote information disclosure without additional execution privileges and requires no user interaction. Public documents describe the affected area as the...

CVE-2023-21265: Improper Certificate Validation

In multiple locations, there are root CA certificates which need to be disabled. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

Amazon Linux AMI : ca-certificates (ALAS-2023-1795)

The version of ca-certificates installed on the remote host is prior to 2018.2.22-65.1.30. It is, therefore, affected by a vulnerability as referenced in the ALAS-2023-1795 advisory. An initial fix in Amazon Linux ca-certificates package relating to CVE-2022-23491 did not properly remove root...

Amazon Linux 2023 : ca-certificates (ALAS2023-2023-281)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-281 advisory. An initial fix in Amazon Linux ca-certificates package relating to CVE-2022-23491 did not properly remove root certificates from TrustCor from the root store. CVE-2023-32803 Tenable has extracted the...

Amazon Linux 2 : ca-certificates (ALAS-2023-2203)

The version of ca-certificates installed on the remote host is prior to 2021.2.50-72. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2203 advisory. An initial fix in Amazon Linux ca-certificates package relating to CVE-2022-23491 did not properly remove root...

Important: ca-certificates

Issue Overview: An initial fix in Amazon Linux ca-certificates package relating to CVE-2022-23491 did not properly remove root certificates from TrustCor from the root store. CVE-2023-32803 Affected Packages: ca-certificates Issue Correction: Run dnf update ca-certificates --releasever...

Important: ca-certificates

Issue Overview: An initial fix in Amazon Linux ca-certificates package relating to CVE-2022-23491 did not properly remove root certificates from TrustCor from the root store. CVE-2023-32803 Affected Packages: ca-certificates Issue Correction: Run yum update ca-certificates or yum update --advisor...

Important: ca-certificates

Issue Overview: An initial fix in Amazon Linux ca-certificates package relating to CVE-2022-23491 did not properly remove root certificates from TrustCor from the root store. CVE-2023-32803 Affected Packages: ca-certificates Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository...

Authorization Bypass

gitlab is vulnerable to Authorization Bypasses. This vulnerability occurs due to a flaw in the way that GitLab handles signed commits. An attacker can exploit this vulnerability to spoof the author of a commit by using a valid certificate that has been signed by a trusted CA...

CLSA-2023-1691082636 Update of alt-php

Update ca-certificates database to 20230629: - mozilla/certdata.txt,nssckbi.h: Update Mozilla certificate authority bundle of the version 2.62. - The following certificate authorities were added: Certificate "BJCA Global Root CA1" Certificate "BJCA Global Root CA2"...

CLSA-2023-1691082298 Update of alt-php

Update ca-certificates database to 20230629: - mozilla/certdata.txt,nssckbi.h: Update Mozilla certificate authority bundle to version 2.62. - The following certificate authorities were added +: + "BJCA Global Root CA1" + "BJCA Global Root CA2"...

CLSA-2023-1691073784 Update of ca-certificates

update to CKBI 2.62 from NSS 3.91 - added new certificates: - Certificate "BJCA Global Root CA1" - Certificate "BJCA Global Root CA2"...

Update of ca-certificates

update to CKBI 2.62 from NSS 3.91 - added new certificates: - Certificate "BJCA Global Root CA1" - Certificate "BJCA Global Root CA2"...

CLSA-2023-1691073510 Update of ca-certificates

update to CKBI 2.62 from NSS 3.91 - added new certificates: - Certificate "BJCA Global Root CA1" - Certificate "BJCA Global Root CA2"...

CLSA-2023-1691068607 Update of ca-certificates

Update to CKBI 2.62 from NSS 3.91 - Certificate "BJCA Global Root CA1" - Certificate "BJCA Global Root CA2"...

CVE-2023-34196

In the Keyfactor EJBCA before 8.0.0, the RA web certificate distribution servlet /ejbca/ra/cert allows partial denial of service due to an authentication issue. In configurations using OAuth, disclosure of CA certificates attributes and public keys to unauthenticated or less privileged users may...

CVE-2023-34196

In the Keyfactor EJBCA before 8.0.0, the RA web certificate distribution servlet /ejbca/ra/cert allows partial denial of service due to an authentication issue. In configurations using OAuth, disclosure of CA certificates attributes and public keys to unauthenticated or less privileged users may...

Authentication flaw

In the Keyfactor EJBCA before 8.0.0, the RA web certificate distribution servlet /ejbca/ra/cert allows partial denial of service due to an authentication issue. In configurations using OAuth, disclosure of CA certificates attributes and public keys to unauthenticated or less privileged users may...