CVE-2023-37920
CVSS 3.1 Score 7.5 of 10 (high)
Details
Summary
CVE-2023-37920 is a cyber vulnerability that affects Certifi, a collection of Root Certificates used for SSL certificate validation and TLS host verification. The vulnerability exists in Certifi prior to version 2023.07.22, which recognizes "e-Tugra" root certificates. These certificates have been flagged due to security issues in their systems, prompting Certifi 2023.07.22 to remove them from the root store. The vulnerability has a high severity rating with a base score of 7.5 and an impact score of 3.6. It poses a potential danger to organizations using the affected Certifi products as it allows for insufficient verification of data authenticity, potentially compromising the integrity of communications and exposing sensitive information. Remediation involves updating to version 2023.07.22 or later to ensure the removal of "e-Tugra" root certificates from the root store and enhance security against this vulnerability.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions