Vulnerability Details CVE-2020-10659
Entrust Entelligence Security Provider (ESP) before 10.0.60 on Windows mishandles errors during SSL Certificate Validation, leading to situations where (for example) a user continues to interact with a web site that has an invalid certificate chain.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 32.3%
CVSS Severity
CVSS v3 Score 4.3
CVSS v2 Score 4.0
References
- https://github.com/etherpacket/CVD-Applications/blob/master/EDC%20Security%20Bulletin%20E19-001a.pdf
- https://github.com/etherpacket/CVD-Applications/blob/master/eespwin_10_10060_readme.pdf
- https://github.com/etherpacket/CVD-Applications/blob/master/EDC%20Security%20Bulletin%20E19-001a.pdf
- https://github.com/etherpacket/CVD-Applications/blob/master/eespwin_10_10060_readme.pdf
Products affected by CVE-2020-10659
-
cpe:2.3:a:entrustdatacard:entelligence_security_provider:*
-
cpe:2.3:o:microsoft:windows:-