Security Advisory
CVE-2023-6056
7.4
HIGH
Vulnerability Description
A vulnerability has been discovered in Bitdefender Total Security HTTPS scanning functionality that results in the improper trust of self-signed certificates. The product is found to trust certificates signed with the RIPEMD-160 hashing algorithm without proper validation, allowing an attacker to establish MITM SSL connections to arbitrary sites.
Published Date
October 18, 2024
Official Source
NIST NVD Advisory