NA

CVE-2021-3601

Published: 29/07/2022 Updated: 07/11/2023

Vulnerability Summary

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. OpenSSL does not class this issue as a security vulnerability. The trusted CA store should not contain anything that the user does not trust to issue other certificates. Notes: github.com/openssl/openssl/issues/5236#issuecomment-119646061

Vulnerability Trend

Vendor Advisories

No description is available for this CVE ...
OpenSSL 102 will accept a certificate with explicitly set Basic Constraints to CA:FALSE as a valid CA if it is present in the trusted bundle ...