CVE-2019-18633

Published: Oct 30, 2019Modified: Nov 21, 2024

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

European Commission eIDAS-Node Integration Package before 2.3.1 has Missing Certificate Validation because a certain ExplicitKeyTrustEvaluator return value is not checked. NOTE: only 2.1 is confirmed to be affected.

Affected (1)

Products: Europa: Eidas Node Integration Package

Europa

1 product

Eidas Node Integration Package

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Europa Eidas Node Integration Package	Version 2.1

Related CWEs

CWE-295

Improper Certificate Validation

The product does not validate, or incorrectly validates, a certificate.

References (2)

https://sec-consult.com/en/blog/advisories/15587/

Source: cve@mitre.org

ExploitThird Party Advisory

https://sec-consult.com/en/blog/advisories/15587/

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

Timeline

No history available yet.