7.5
Élevée
CVE-2026-3336 Improper certificate validation in PKCS7_verify() in AWS-LC allows an unauthenticated user to bypass certificate chain…
Description
Improper certificate validation in PKCS7_verify() in AWS-LC allows an unauthenticated user to bypass certificate chain verification when processing PKCS7 objects with multiple signers, except the final signer. Customers of AWS services do not need to take action. Applications using AWS-LC should upgrade to AWS-LC version 1.69.0.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Red Hat Trusted Artifact Signer 1.3 1773307309 | premières → < 1773307309 | 1773307309 |
| Confidential Compute Attestation | Versions non publiées | |
| Red Hat Enterprise Linux 10 | Versions non publiées | |
| Red Hat Enterprise Linux 9 | Versions non publiées | |
| Red Hat OpenShift Container Platform 4 | Versions non publiées | |
| Red Hat Trusted Profile Analyzer | Versions non publiées | |
| Red Hat OpenShift Update Service | Versions non publiées | |
| AWS-LC 1.41 | 1.41.0 → < 1.69.0 | 1.69.0 |
Références
- aws.amazon.com aws.amazon.com
- github.com github.com
- github.com github.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Red Hat Trusted Artifact Signer 1.3
Les 55 CVE de Red Hat Trusted Artifact Signer 1.3 →
CVE-2026-44486
Axios is a promise based HTTP client for the browser and Node.js
7.5
Élevée
CVE-2026-44487
Axios is a promise based HTTP client for the browser and Node.js
8.2
Élevée
CVE-2026-44488
Axios is a promise based HTTP client for the browser and Node.js
7.5
Élevée
CVE-2026-44496
Axios is a promise based HTTP client for the browser and Node.js
7.5
Élevée