medium4.3
CVE-2020-10659
Entrust Entelligence Security Provider (ESP) before 10.0.60 on Windows mishandles errors during SSL Certificate Validation, leading to situations where (for ex…
Impact
Entrust Entelligence Security Provider (ESP) before 10.0.60 on Windows mishandles errors during SSL Certificate Validation, leading to situations where (for example) a user continues to interact with a web site that has an invalid certificate chain.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Entrustdatacard | Entelligence Security Provider | before 10.0.60 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/etherpacket/CVD-Applications/blob/master/EDC%20Security%20Bulletin%20E19-001a.pdf
- https://github.com/etherpacket/CVD-Applications/blob/master/eespwin_10_10060_readme.pdf
- https://github.com/etherpacket/CVD-Applications/blob/master/EDC%20Security%20Bulletin%20E19-001a.pdf
- https://github.com/etherpacket/CVD-Applications/blob/master/eespwin_10_10060_readme.pdf