7.5

CVE-2020-8286

Exploit
curl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to insufficient verification of the OCSP response.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Haxx ≫ Libcurl Version >= 7.41.0 < 7.74.0
Fedoraproject ≫ Fedora Version 32
Fedoraproject ≫ Fedora Version 33
Debian ≫ Debian Linux Version 9.0
Debian ≫ Debian Linux Version 10.0
Netapp ≫ Hci Management Node Version -
Netapp ≫ Solidfire Version -
Netapp ≫ Hci Bootstrap Os Version -
   Netapp ≫ Hci Compute Node Version -
Netapp ≫ Hci Storage Node Firmware Version -
   Netapp ≫ Hci Storage Node Version -
Apple ≫ macOS X Version < 10.14.6
Apple ≫ macOS X Version >= 10.15 < 10.15.7
Apple ≫ macOS X Version 10.14.6 Update -
Apple ≫ macOS X Version 10.14.6 Update security_update_2019-001
Apple ≫ macOS X Version 10.14.6 Update security_update_2019-002
Apple ≫ macOS X Version 10.14.6 Update security_update_2020-001
Apple ≫ macOS X Version 10.14.6 Update security_update_2020-002
Apple ≫ macOS X Version 10.14.6 Update security_update_2020-003
Apple ≫ macOS X Version 10.14.6 Update security_update_2020-004
Apple ≫ macOS X Version 10.14.6 Update security_update_2020-005
Apple ≫ macOS X Version 10.14.6 Update security_update_2020-006
Apple ≫ macOS X Version 10.14.6 Update security_update_2020-007
Apple ≫ macOS X Version 10.14.6 Update security_update_2021-001
Apple ≫ macOS X Version 10.15.7 Update -
Apple ≫ macOS X Version 10.15.7 Update security_update_2020-001
Apple ≫ macOS X Version 10.15.7 Update security_update_2021-001
Apple ≫ macOS X Version 10.15.7 Update supplemental_update
Apple ≫ macOS Version >= 11.0 < 11.3
Siemens ≫ Simatic Tim 1531 Irc Firmware Version <= 2.2
   Siemens ≫ Simatic Tim 1531 Irc Version -
Oracle ≫ Essbase Version 21.2
Splunk ≫ Universal Forwarder Version >= 8.2.0 < 8.2.12
Splunk ≫ Universal Forwarder Version >= 9.0.0 < 9.0.6
Splunk ≫ Universal Forwarder Version 9.1.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 4.58% 0.904
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:P/A:N
CWE-295 Improper Certificate Validation

The product does not validate, or incorrectly validates, a certificate.

https://www.oracle.com/security-alerts/cpuapr2022.html
Patch
Third Party Advisory
https://www.oracle.com//security-alerts/cpujul2021.html
Third Party Advisory
https://www.oracle.com/security-alerts/cpuApr2021.html
Third Party Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf
Patch
Third Party Advisory
http://seclists.org/fulldisclosure/2021/Apr/51
Third Party Advisory
Mailing List
https://support.apple.com/kb/HT212326
Third Party Advisory
https://support.apple.com/kb/HT212327
Third Party Advisory
https://support.apple.com/kb/HT212325
Third Party Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-200951.pdf
Third Party Advisory
https://www.debian.org/security/2021/dsa-4881
Third Party Advisory
https://security.gentoo.org/glsa/202012-14
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2020/12/msg00029.html
Third Party Advisory
Mailing List
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DAEHE2S2QLO4AO4MEEYL75NB7SAH5PSL/
Third Party Advisory
Mailing List
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NZUVSQHN2ESHMJXNQ2Z7T2EELBB5HJXG/
Third Party Advisory
Mailing List
https://security.netapp.com/advisory/ntap-20210122-0007/
Third Party Advisory
http://seclists.org/fulldisclosure/2021/Apr/50
Third Party Advisory
Mailing List
http://seclists.org/fulldisclosure/2021/Apr/54
Third Party Advisory
Mailing List
https://curl.se/docs/CVE-2020-8286.html
Vendor Advisory
https://hackerone.com/reports/1048457
Patch
Third Party Advisory
Exploit