60
CVE-2017-2801
PoC —CVSS 3.0
9.8 critical
EPSS
1%p69
Published
()
Modified
Description
A programming error exists in a way Randombit Botan cryptographic library version 2.0.1 implements x500 string comparisons which could lead to certificate verification issues and abuse. A specially crafted X509 certificate would need to be delivered to the client or server application in order to trigger this vulnerability.
- Vendors
- botan project
- Products
- botan
- Weakness
- CWE-125
- Vector
- CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H