PT-2022-28293 · Microsoft · Windows

Published 2022-01-04 · Updated 2022-01-04

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Windows (affected versions not specified)

Description The issue concerns X509 Certificate verification, which does not validate KeyUsages EKU requirements on Windows when VerifyOptions.Roots is nil.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

GO-2021-0140

Affected Products

Windows

References · 5

• https://osv.dev/vulnerability/GO-2021-0140 · Vendor Advisory
• https://go.googlesource.com/go/+/82175e699a2e2cd83d3aa34949e9b922d66d52f5 · Note
• https://go.dev/cl/242597 · Note
• https://groups.google.com/g/golang-announce/c/XZNfaiwgt2w · Note
• https://go.dev/issue/39360 · Note