PT-2023-35498 · Unknown · X509-Validation

Publicado 2023-07-19 · Atualizado 2025-11-14

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions x509-validation versions prior to 1.4.8

Description The issue concerns the failure to enforce the pathLenConstraint value, allowing constrained CAs to potentially issue certificates below the maximum depth. This could lead to the acceptance of certificates issued by unauthorized intermediate CAs.

Recommendations For versions prior to 1.4.8, update to version 1.4.8 or later to enforce the pathLenConstraint value and prevent the acceptance of certificates issued by unauthorized intermediate CAs.

Identificadores relacionados

HSEC-2023-0006

Produtos afetados

X509-Validation

Referências · 5

• https://github.com/haskell-tls/hs-certificate/commit/06d15dbbc53739314760d8504ca764000770e46e · Nota
• https://github.com/haskell/security-advisories · Nota
• https://osv.dev/vulnerability/HSEC-2023-0006 · Aviso do Fabricante
• https://haskell.github.io/security-advisories · Nota
• https://raw.githubusercontent.com/haskell/security-advisories/refs/heads/generated/osv-export · Nota