Remove E-Tugra certificates

2023-11-0100:00:00

Google

osv.dev

ca-certificates

encrypted tls data

remote information disclosure

software

6.7 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

JSON

In ca-certificates, there is a possible way to read encrypted TLS data due to untrusted cryptographic certificates. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

CPENameOperatorVersion
platform/system/ca-certificateseq12L
platform/external/conscrypteq13
platform/external/conscrypteq11
platform/system/ca-certificateseq13
platform/external/conscrypteq12
platform/system/ca-certificateseq12
platform/system/ca-certificateseq11
platform/external/conscrypteq12L

Name	Operator	Version
platform/system/ca-certificates	eq	12L
platform/external/conscrypt	eq	13
platform/external/conscrypt	eq	11
platform/system/ca-certificates	eq	13
platform/external/conscrypt	eq	12
platform/system/ca-certificates	eq	12
platform/system/ca-certificates	eq	11
platform/external/conscrypt	eq	12L