CVE-2009-3046

Published: Sep 2, 2009Modified: Apr 23, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

Opera before 10.00 does not check all intermediate X.509 certificates for revocation, which makes it easier for remote SSL servers to bypass validation of the certificate chain via a revoked certificate.

Affected (1)

Products: Opera: Opera Browser

Opera

1 product

Opera Browser

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Opera Opera Browser	Before 10.00

Related CWEs

CWE-295

Improper Certificate Validation

The product does not validate, or incorrectly validates, a certificate.

References (14)

http://www.opera.com/docs/changelogs/freebsd/1000/

Source: cve@mitre.org

Broken LinkVendor Advisory

http://www.opera.com/docs/changelogs/linux/1000/

Source: cve@mitre.org

Broken LinkVendor Advisory

http://www.opera.com/docs/changelogs/mac/1000/

Source: cve@mitre.org

Broken LinkVendor Advisory

http://www.opera.com/docs/changelogs/solaris/1000/

Source: cve@mitre.org

Broken LinkVendor Advisory

http://www.opera.com/docs/changelogs/windows/1000/

Source: cve@mitre.org

Broken LinkVendor Advisory

http://www.opera.com/support/kb/view/929/

Source: cve@mitre.org

Broken LinkVendor Advisory

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6357

Source: cve@mitre.org

Broken Link

http://www.opera.com/docs/changelogs/freebsd/1000/