Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:26958
HistorySep 21, 2020 - 6:27 a.m.

Certificate Signature Forging

2020-09-2106:27:33
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8

0.002 Low

EPSS

Percentile

61.4%

gnupg2 allows forging of certificate signature. Certificate signatures can be forged using collisions found in the SHA-1 algorithm. An attacker is able to exploit the vulnerability to create forged certificate signatures.