PT-2022-10484 · Openssl · Openssl

Published 2022-07-29 · Updated 2022-07-29 · CVE-2021-3601

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions OpenSSL (affected versions not specified)

Description The issue was withdrawn by its CNA and OpenSSL does not class it as a security vulnerability. It is noted that the trusted CA store should not contain anything that the user does not trust to issue other certificates.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2021-3601

Affected Products

Openssl

References · 5

• https://ubuntu.com/security/CVE-2021-3601 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-3601 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2021-3601 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-3601 · Security Note
• https://t.me/cibsecurity/47249 · Telegram Post