CVE-2023-37920

CVSS 3.1 Score 7.5 of 10 (high)

Details

Published Jul 25, 2023
Updated: Aug 12, 2023
CWE ID 345

Summary

CVE-2023-37920 is a cyber vulnerability that affects Certifi, a collection of Root Certificates used for SSL certificate validation and TLS host verification. The vulnerability exists in Certifi prior to version 2023.07.22, which recognizes "e-Tugra" root certificates. These certificates have been flagged due to security issues in their systems, prompting Certifi 2023.07.22 to remove them from the root store. The vulnerability has a high severity rating with a base score of 7.5 and an impact score of 3.6. It poses a potential danger to organizations using the affected Certifi products as it allows for insufficient verification of data authenticity, potentially compromising the integrity of communications and exposing sensitive information. Remediation involves updating to version 2023.07.22 or later to ensure the removal of "e-Tugra" root certificates from the root store and enhance security against this vulnerability.

Share

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-37920 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options