Description (CNA)
The ca-certificates package before ca-certificates-2021.2.50-72 for Amazon Linux 2 (AL2) does not properly remove certain TrustCor root certificates from the root store. NOTE: this issue exists because of an incorrect fix for CVE-2022-23491.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Amazon / ca-certificates | affected 0 before 2021.2.50-72 |
CWE
CWE-669
References
- https://alas.aws.amazon.com/AL2/ALAS-2023-1957.html
- https://explore.alas.aws.amazon.com/CVE-2023-32803.html
ADP enrichment
No English description supplied.
No references supplied.