← CVE Intelligence

CVE-2025-12889

TLS 1.2 Client Can Downgrade Digest Used PUBLISHED

Description (CNA)

With TLS 1.2 connections a client can use any digest, specifically a weaker digest that is supported, rather than those in the CertificateRequest.

Affected (CNA)

Vendor / productVersions
wolfSSL / wolfSSLaffected 0 before 5.8.4

CWE

CWE-20

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.