Vulnerability Details CVE-2023-6056
A vulnerability has been discovered in Bitdefender Total Security HTTPS scanning functionality that results in the improper trust of self-signed certificates. The product is found to trust certificates signed with the RIPEMD-160 hashing algorithm without proper validation, allowing an attacker to establish MITM SSL connections to arbitrary sites.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 10.0%
CVSS Severity
CVSS v3 Score 7.4
Products affected by CVE-2023-6056
-
cpe:2.3:a:bitdefender:total_security:-
-
cpe:2.3:a:bitdefender:total_security:12.0
-
cpe:2.3:a:bitdefender:total_security:21.0.24.62
-
cpe:2.3:a:bitdefender:total_security:23.0.24.120
-
cpe:2.3:a:bitdefender:total_security:24.0.26.136
-
cpe:2.3:a:bitdefender:total_security:25.0.7.29
-
cpe:2.3:a:bitdefender:total_security:26.0.10.45
-
cpe:2.3:a:bitdefender:total_security:26.0.3.29
-
cpe:2.3:a:bitdefender:total_security:7.2.1.65