Lucene search

K
opensslOpenSSLOPENSSL:CVE-2011-3207
HistorySep 06, 2011 - 12:00 a.m.

Vulnerability in OpenSSL CVE-2011-3207

2011-09-0600:00:00
www.openssl.org
18

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

9.3 High

AI Score

Confidence

High

0.013 Low

EPSS

Percentile

86.0%

Under certain circumstances OpenSSL's internal certificate verification routines can incorrectly accept a CRL whose nextUpdate field is in the past. Applications are only affected by the CRL checking vulnerability if they enable OpenSSL's internal CRL checking which is off by default. Applications which use their own custom CRL checking (such as Apache) are not affected.

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

9.3 High

AI Score

Confidence

High

0.013 Low

EPSS

Percentile

86.0%