← CVE Intelligence

CVE-2023-5594

Improper following of a certificate's chain of trust in ESET security products PUBLISHED

Description (CNA)

Improper validation of the server’s certificate chain in secure traffic scanning feature considered intermediate certificate signed using the MD5 or SHA1 algorithm as trusted.

Affected (CNA)

Vendor / productVersions
ESET, spol. s r.o. / ESET NOD32 Antivirusunaffected 1464
ESET, spol. s r.o. / ESET Internet Securityunaffected 1464
ESET, spol. s r.o. / ESET Smart Security Premiumunaffected 1464
ESET, spol. s r.o. / ESET Security Ultimateunaffected 1464
ESET, spol. s r.o. / ESET Endpoint Antivirusunaffected 1464
ESET, spol. s r.o. / ESET Endpoint Securityunaffected 1464
ESET, spol. s r.o. / ESET Endpoint Antivirus for Linux 10.0 and aboveunaffected 1464
ESET, spol. s r.o. / ESET Server Security for Windows Serverunaffected 1464
ESET, spol. s r.o. / ESET Mail Security for Microsoft Exchange Serverunaffected 1464
ESET, spol. s r.o. / ESET Mail Security for IBM Dominounaffected 1464
ESET, spol. s r.o. / ESET Security for Microsoft SharePoint Serverunaffected 1464
ESET, spol. s r.o. / ESET File Security for Microsoft Azureunaffected 1464
ESET, spol. s r.o. / ESET Server Security for Linux 10.1 and above unaffected 1464

CWE

CWE-295

References

ADP enrichment

CVE

No English description supplied.