Lucene search
MitreCVE-2023-25392HistoryApr 10, 2023 - 2:15 p.m.
CVE-2023-25392
2023-04-1014:15:09
CWE-295
mitre
web.nvd.nist.gov
23
allegro tech bigflow
ssl
certificate validation
vulnerability
cve-2023-25392
nvd
CVSS3
5.9
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
AI Score
5.6
Confidence
High
EPSS
0.001
Percentile
41.9%
Allegro Tech BigFlow <1.6 is vulnerable to Missing SSL Certificate Validation.
Affected configurations
Node
allegrobigflowRange<1.6
Related
nvd
nvd
CVE-2023-25392
2023-04-10 14:15:09
prion
prion
Input validation
2023-04-10 14:15:00
veracode
veracode
Improper Certificate Validation
2023-04-21 05:17:45
osv
osv
CVE-2023-25392
2023-04-10 14:15:09
Allegro Tech BigFlow vulnerable to Missing SSL Certificate Validation
2023-04-10 15:30:26
cvelist
cvelist
CVE-2023-25392
2023-04-10 00:00:00
github
github
Allegro Tech BigFlow vulnerable to Missing SSL Certificate Validation
2023-04-10 15:30:26
CVSS3
5.9
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
AI Score
5.6
Confidence
High
EPSS
0.001
Percentile
41.9%
Related for CVE-2023-25392