Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2023-5594

Improper following of a certificate's chain of trust in ESET security products

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
ESET

Description

Improper validation of the server’s certificate chain in secure traffic scanning feature considered intermediate certificate signed using the MD5 or SHA1 algorithm as trusted.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ESET, spol. s r.o. ESET NOD32 Antivirus

Default version status: unaffected

  • 1464unaffected

ESET, spol. s r.o. ESET Internet Security

Default version status: unaffected

  • 1464unaffected

ESET, spol. s r.o. ESET Smart Security Premium

Default version status: unaffected

  • 1464unaffected

ESET, spol. s r.o. ESET Security Ultimate

Default version status: unaffected

  • 1464unaffected

ESET, spol. s r.o. ESET Endpoint Antivirus

Default version status: unaffected

  • 1464unaffected

ESET, spol. s r.o. ESET Endpoint Security

Default version status: unaffected

  • 1464unaffected

ESET, spol. s r.o. ESET Endpoint Antivirus for Linux 10.0 and above

Default version status: unaffected

  • 1464unaffected

ESET, spol. s r.o. ESET Server Security for Windows Server

Default version status: unaffected

  • 1464unaffected

ESET, spol. s r.o. ESET Mail Security for Microsoft Exchange Server

Default version status: unaffected

  • 1464unaffected

ESET, spol. s r.o. ESET Mail Security for IBM Domino

Default version status: unaffected

  • 1464unaffected

ESET, spol. s r.o. ESET Security for Microsoft SharePoint Server

Default version status: unaffected

  • 1464unaffected

ESET, spol. s r.o. ESET File Security for Microsoft Azure

Default version status: unaffected

  • 1464unaffected

ESET, spol. s r.o. ESET Server Security for Linux 10.1 and above

Default version status: unaffected

  • 1464unaffected

References