high7.5
CVE-2023-5594
Improper validation of the server’s certificate chain in secure traffic scanning feature considered intermediate certificate signed using the MD5 or SHA1 algor…
Impact
Improper validation of the server’s certificate chain in secure traffic scanning feature considered intermediate certificate signed using the MD5 or SHA1 algorithm as trusted.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Eset | Endpoint Antivirus | from 10.0 All versions |
| Eset | Endpoint Security | All versions |
| Eset | File Security | All versions |
| Eset | Internet Security | All versions |
| Eset | Mail Security | All versions |
| Eset | Nod32 Antivirus | All versions |
| Eset | Security | All versions |
| Eset | Server Security | from 10.1 All versions |
| Eset | Smart Security | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- https://support.eset.com/en/ca8562-eset-customer-advisory-improper-following-of-a-certificates-chain-of-trust-in-eset-security-products-fixed
- https://support.eset.com/en/ca8562-eset-customer-advisory-improper-following-of-a-certificates-chain-of-trust-in-eset-security-products-fixed