CVE-2025-43918

SSL.com / SSL.com PUBLISHED

Description (CNA)

SSL.com before 2025-04-19, when domain validation method 3.2.2.4.14 is used, processes certificate requests such that a trusted TLS certificate may be issued for the domain name of a requester's email address, even when the requester does not otherwise establish administrative control of that domain.

Affected (CNA)

Vendor / product	Versions
SSL.com / SSL.com	affected 0 before 2025-04-19

CWE

CWE-348

References

https://news.ycombinator.com/item?id=43738485
https://bugzilla.mozilla.org/show_bug.cgi?id=1961406

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.