CVE-2023-5594 HIGH

CVE-2023-5594: Improper following of a certificate's chain of trust in ESET security products

Weakness CWE-295

Published December 21, 2023

Last update August 2, 2024

View on NVD All CVEs

CVSS base score

7.5/10

Attack vector Network

Attack complexity High

Privileges required None

User interaction None

Confidentiality High

Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:L/A:N

What the vulnerability does

01Description

Improper validation of the server’s certificate chain in secure traffic scanning feature considered intermediate certificate signed using the MD5 or SHA1 algorithm as trusted.

Key dates

02Disclosure timeline

December 21, 2023 CVE published

August 2, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2023-5594 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/295.html

Related vulnerabilities

CVE-2023-5594: Improper following of a certificate's chain of trust in ESET security products

01Description

02Disclosure timeline

03References

04Related CVE

CVE-2023-5594: Improper following of a certificate's chain of trust in ESET security products