EUVD-2019-8356

Malware in sbrugna...

Code injection

European Commission eIDAS-Node Integration Package before 2.3.1 has Missing Certificate Validation because a certain ExplicitKeyTrustEvaluator return value is not checked. NOTE: only 2.1 is confirmed to be affected...

PT-2019-15544

Name of the Vulnerable Software and Affected Versions European Commission eIDAS-Node Integration Package versions prior to 2.3.1 Description The issue is related to Missing Certificate Validation. This occurs because a certain ExplicitKeyTrustEvaluator return value is not checked, which can lead ...

PT-2019-15543

Name of the Vulnerable Software and Affected Versions European Commission eIDAS-Node Integration Package versions prior to 2.3.1 Description The issue allows for Certificate Faking, where an attacker can sign a manipulated SAML response with a forged certificate. Recommendations For versions prio...

CVE-2019-18633: Improper Certificate Validation

European Commission eIDAS-Node Integration Package before 2.3.1 has Missing Certificate Validation because a certain ExplicitKeyTrustEvaluator return value is not checked. NOTE: only 2.1 is confirmed to be affected...

CVE-2019-18632: Improper Certificate Validation

European Commission eIDAS-Node Integration Package before 2.3.1 allows Certificate Faking because an attacker can sign a manipulated SAML response with a forged certificate...