CVE-2023-37920

CVSS V2 None CVSS V3 None
Description
Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi prior to version 2023.07.22 recognizes "e-Tugra" root certificates. e-Tugra's root certificates were subject to an investigation prompted by reporting of security issues in their systems. Certifi 2023.07.22 removes root certificates from "e-Tugra" from the root store.
Overview
  • CVE ID
  • CVE-2023-37920
  • Assigner
  • GitHub_M
  • Vulnerability Status
  • PUBLISHED
  • Published Version
  • 2023-07-25T20:45:35.286Z
  • Last Modified Date
  • 2023-07-25T20:46:04.572Z
Weakness Enumerations
CWE URL
CWE-345 http://cwe.mitre.org/data/definitions/345.html
References
Reference URL Reference Tags
https://github.com/certifi/python-certifi/security/advisories/GHSA-xqr8-7jwr-rhp7 x_refsource_CONFIRM
https://github.com/certifi/python-certifi/commit/8fb96ed81f71e7097ed11bc4d9b19afd7ea5c909 x_refsource_MISC
https://groups.google.com/a/mozilla.org/g/dev-security-policy/c/C-HrP1SEq1A x_refsource_MISC
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5EX6NG7WUFNUKGFHLM35KHHU3GAKXRTG/
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2023-37920
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-37920
History
Created Old Value New Value Data Type Notes
2024-06-25 00:44:57 Added to TrackCVE