What is CVE-2017-1000415?

CVE-2017-1000415 is a medium-severity vulnerability in Matrixssl, classified under Improper Certificate Validation. CVSS score: 5.9/10. Published 2018-01-09.

How severe is CVE-2017-1000415?

Medium severity. CVSS v3 base score is 5.9 out of 10.

Vulnerability in Matrixssl

CVE-2017-1000415

MatrixSSL version 3.7.2 has an incorrect UTCTime date range validation in its X.509 certificate validation process resulting in some certificates have their expiration (beginning) year extended (delayed) by 100 years.

Vulnerability class: Improper Certificate Validation

EPSS: 0.005 (39.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.9 (Medium). Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N.

Affected products

Matrixssl — versions 3.7.2
N/a — versions n/a

Weakness classification (CWE)

CWE-295 — Improper Certificate Validation

References

cve@mitre.org (Third Party Advisory, x_refsource_MISC)
cve@mitre.org (Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2017-1000415?: CVE-2017-1000415 is a medium-severity vulnerability in Matrixssl, classified under Improper Certificate Validation. CVSS score: 5.9/10. Published 2018-01-09.
How severe is CVE-2017-1000415?: Medium severity. CVSS v3 base score is 5.9 out of 10.