Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered in RIPE NCC RPKI Validator 3.x through 3.1-2020.07.06.14.28. Missing validation checks on CRL presence or CRL staleness in the X509-based RPKI certificate-tree validation procedure allow remote attackers to bypass intended access restrictions by using revoked certificates. NOTE: there may be counterarguments related to backwards compatibility
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
RIPE NCC RPKI Validator 信任管理问题漏洞
Vulnerability Description
RIPE NCC RPKI Validator是荷兰RIPE NCC公司的一款RPKI验证器。 RIPE NCC RPKI Validator 3.x版本至3.1-2020.07.06.14.28版本中存在安全漏洞,该漏洞源于程序没有检查CRL是否存在或是否失效。远程攻击者可借助特制证书利用该漏洞绕过访问限制。
CVSS Information
N/A
Vulnerability Type
N/A