Improper Certificate Validation

🗓️ 18 Jul 2023 11:20:41Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 38 Views

Improper Certificate Validation in cryptography softwar

Reporter	Title	Published	Views	Family All 66
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to weakened security in Python Cryptographic Authority [CVE-2023-38325]	30 Nov 202318:53	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Network Automation 2.6.2 fixes multiple security vulnerabilities	6 Oct 202316:11	–	ibm
IBM Security Bulletins	Security Bulletin: Storage Virtualize ansible collection is affected by a vulnerability in the Python Cryptographic Authority package [CVE-2023-38325]	9 Oct 202313:41	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities exists in IBM Netezza Performance Server Replication Services	27 Feb 202619:55	–	ibm
IBM Security Bulletins	Security Bulletin: z/Transaction Processing Facility is affected by a vulnerability in the Python Cryptographic Authority package [CVE-2023-38325]	29 Aug 202323:49	–	ibm
IBM Security Bulletins	Security Bulletin: QRadar Suite Software includes components with multiple known vulnerabilities	15 Feb 202413:10	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Python Cryptographic Authority cryptography affects IBM Process Mining . CVE-2023-38325	11 Oct 202309:25	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge for IBM Cloud Pak for Data affected by vulnerability in Python Cryptographic Authority cryptography	27 Sep 202321:10	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in CloudPak for Watson AIOps	26 Mar 202503:58	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in cryptography may affect IBM Spectrum Sentinel Anomaly Scan Engine (CVE-2023-23931, CVE-2023-38325)	15 Dec 202313:02	–	ibm

Vulners

Node

py3-cryptography py3-cryptographyMatch40.0.2-r1python

AND

alpinelinux alpine_linuxMatch3.18

py3-cryptography py3-cryptographyMatch38.0.4-r0python

AND

py3-cryptography py3-cryptographyMatch37.0.4-r2python

AND

py3-cryptography py3-cryptographyMatch3.3.2-r4python

AND

py3-cryptography py3-cryptographyMatch40.0.2-r1python

AND

py3-cryptography py3-cryptographyMatch37.0.4-r0python

AND

py3-cryptography py3-cryptographyMatch3.3.2-r3python

AND

py3-cryptography py3-cryptographyMatch2.8-r1python

AND

py3-cryptography py3-cryptographyMatch3.4.8-r1python

AND

py3-cryptography py3-cryptographyMatch3.4.8-r0python

AND

py3-cryptography py3-cryptographyMatch3.3.2-r2python

AND

py3-cryptography py3-cryptographyMatch38.0.2-r0python

AND

py3-cryptography py3-cryptographyMatch2.9.2-r0python

AND

py3-cryptography py3-cryptographyMatch41.0.1-r0python

AND

py3-cryptography py3-cryptographyMatch38.0.3-r0python

AND

py3-cryptography py3-cryptographyMatch40.0.1-r0python

AND

py3-cryptography py3-cryptographyMatch3.3.2-r0python

AND

py3-cryptography py3-cryptographyMatch39.0.1-r0python

AND

py3-cryptography py3-cryptographyMatch39.0.0-r0python

AND

py3-cryptography py3-cryptographyMatch3.3.2-r1python

AND

py3-cryptography py3-cryptographyMatch39.0.2-r0python

AND

py3-cryptography py3-cryptographyMatch2.9-r0python

AND

alpinelinux alpine_linuxMatchedge

cryptography.io cryptographyRange40.0.0–41.0.1python

Source	Link
github	www.github.com/pyca/cryptography/issues/9207
github	www.github.com/pyca/cryptography/commit/1ca7adc97b76a9dfbd3d850628b613eb93b78fc3
github	www.github.com/pyca/cryptography/commit/e190ef190525999d1f599cf8c3aef5cb7f3a8bc4
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NMCCTYY3CSNQBFFYYC5DAV6KATHWCUZK/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/NMCCTYY3CSNQBFFYYC5DAV6KATHWCUZK/
github	www.github.com/advisories/GHSA-cf7p-gm2m-833m
github	www.github.com/pyca/cryptography/compare/41.0.1...41.0.2
github	www.github.com/pyca/cryptography/pull/9208
pypi	www.pypi.org/project/cryptography/
security	www.security.netapp.com/advisory/ntap-20230824-0010/

07 Nov 2023 21:10Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.17.5

EPSS0.01168

SSVC