Description (CNA)
wget2 accepts a server certificate with incorrect Key Usage (KU) or Extended Key Usage (EKU). If the attackers compromise a certificate (with the associated private key) issued for a different purpose, they may be able to reuse it for TLS server authentication.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| gnu / wget2 | affected 0 through 2.2.1 |
CWE
CWE-20
References
ADP enrichment
No English description supplied.
No references supplied.