Lucene search
Veracode Vulnerability DatabaseVERACODE:5238HistoryOct 05, 2017 - 11:09 p.m.
Untrusted Certificate Validation
2017-10-0523:09:22
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
3
0.001 Low
EPSS
Percentile
39.1%
crypto/x509 in github.com/golang/go uses untrusted certificates for validation. When used on Darwin, golang will use an untrusted root certificate as if it were trusted when verifying connections.
| CPE | Name | Operator | Version |
|---|---|---|---|
| github.com/golang/go | eq | HEAD | |
| github.com/golang/go | le | 1.8beta1 | |
| github.com/golang/go | eq | HEAD | |
| github.com/golang/go | le | 1.8beta1 |
Related
ubuntucve
ubuntucve
CVE-2017-1000097
2017-10-05 00:00:00
osv
osv
CVE-2017-1000097
2017-10-05 01:29:03
Mishandled trust preferences for root certificates on Darwin in crypto/x509
2022-05-24 20:17:59
nvd
nvd
CVE-2017-1000097
2017-10-05 01:29:03
redhatcve
redhatcve
CVE-2017-1000097
2017-10-04 12:19:33
debiancve
debiancve
CVE-2017-1000097
2017-10-05 01:29:00
cve
cve
CVE-2017-1000097
2022-10-03 16:23:10
prion
prion
Code injection
2017-10-05 01:29:00
cvelist
cvelist
CVE-2017-1000097
2022-10-03 16:23:10
nessus
nessus
RHEL 7 : golang (Unpatched Vulnerability)
2024-06-03 00:00:00
RHEL 7 : golang (Unpatched Vulnerability)
2024-05-11 00:00:00