CVE-2023-5594

Summary

Improper validation of the server’s certificate chain in secure traffic scanning feature considered intermediate certificate signed using the MD5 or SHA1 algorithm as trusted.

Affected Software

VendorProductVersion RangeStatus
ESET, spol. s r.o.ESET NOD32 Antivirus1464unaffected
ESET, spol. s r.o.ESET Internet Security1464unaffected
ESET, spol. s r.o.ESET Smart Security Premium1464unaffected
ESET, spol. s r.o.ESET Security Ultimate1464unaffected
ESET, spol. s r.o.ESET Endpoint Antivirus1464unaffected
ESET, spol. s r.o.ESET Endpoint Security1464unaffected
ESET, spol. s r.o.ESET Endpoint Antivirus for Linux 10.0 and above1464unaffected
ESET, spol. s r.o.ESET Server Security for Windows Server1464unaffected
ESET, spol. s r.o.ESET Mail Security for Microsoft Exchange Server1464unaffected
ESET, spol. s r.o.ESET Mail Security for IBM Domino1464unaffected
ESET, spol. s r.o.ESET Security for Microsoft SharePoint Server1464unaffected
ESET, spol. s r.o.ESET File Security for Microsoft Azure1464unaffected
ESET, spol. s r.o.ESET Server Security for Linux 10.1 and above1464unaffected

Weaknesses

  • CWE-295: CWE-295 Improper Certificate Validation

ADP Enrichment

CVE Program Container

Additional References

References