CVE-2023-37920highCWE-345

CVE-2023-37920: falha de alta gravidade em certifi python-certifi

Certifi's removal of e-Tugra root certificate

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar python-certifi+ Monitorar python-certifi

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.5epss 0.6%
Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi prior to version 2023.07.22 recognizes "e-Tugra" root certificates. e-Tugra's root certificates were subject to an investigation prompted by reporting of security issues in their systems. Certifi 2023.07.22 removes root certificates from "e-Tugra" from the root store.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Produtos afetados
certifi · python-certifi
CVEs relacionadas — certifi python-certifi

No mesmo produto, das mais perigosas para as menos.

CVE-2024-39689HIGHCertifi removes GLOBALTRUST root certificateEPSS 1.0%CVE-2022-23491MEDIUMRemoval of TrustCor root certificateEPSS 0.5%