CVE-2020-8286

HIGH · 7.5 CVSS Gepubliceerd: 14-12-2020 CWE-295

Beschrijving

curl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to insufficient verification of the OCSP response.

Vendors

Haxx Fedoraproject Debian Netapp Apple Siemens Oracle Splunk

Affected products

Libcurl Fedora Debian Linux Clustered Data Ontap Hci Management Node Solidfire Hci Bootstrap Os Hci Compute Node Hci Storage Node Firmware Hci Storage Node Mac Os X Macos Simatic Tim 1531 Irc Firmware Simatic Tim 1531 Irc Sinec Infrastructure Network Services Communications Billing And Revenue Management Communications Cloud Native Core Policy Essbase Peoplesoft Enterprise Peopletools Universal Forwarder

Beschrijving

Vendors

Affected products

References