Vulnerability in Openca

CVE-2003-0960

OpenCA before 0.9.1.4 does not use the correct certificate in a chain to check the serial, which could cause OpenCA to accept revoked or expired certificates.

EPSS: 0.007 (49.8th percentile) — read the EPSS interpretation.

Affected products

  • Openca — versions 0.8.0, 0.8.1, 0.8.6
  • N/a — versions n/a

References