medium5.9
CVE-2014-2903
CyaSSL does not check the key usage extension in leaf certificates, which allows remote attackers to spoof servers via a crafted server certificate not authori…
Impact
CyaSSL does not check the key usage extension in leaf certificates, which allows remote attackers to spoof servers via a crafted server certificate not authorized for use in an SSL/TLS handshake.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wolfssl | Wolfssl | through 2.9.4 |