Skip to content
OpenAdvisories
High · 7.5 CVE-2023-5594 EUVD-2023-57887GHSA-4mwg-64w4-5g5m

Improper following of a certificate's chain of trust in ESET security products

Published Dec 21, 2023 · Updated Aug 2, 2024 · Assigned by ESET

Vendor: ESET spol. s.r.o. Product: ESET Endpoint Antivirus Product: ESET Endpoint Antivirus for Linux 10.0 and above Product: ESET Endpoint Security Product: ESET File Security for Microsoft Azure Product: ESET Internet Security Product: ESET Mail Security for IBM Domino Product: ESET Mail Security for Microsoft Exchange Server Product: ESET NOD32 Antivirus Product: ESET Security for Microsoft SharePoint Server Product: ESET Security Ultimate Product: ESET Server Security for Linux 10.1 and above Product: ESET Server Security for Windows Server Product: ESET Smart Security Premium Platform: Linux Platform: Windows

Description

Improper validation of the server’s certificate chain in secure traffic scanning feature considered intermediate certificate signed using the MD5 or SHA1 algorithm as trusted.

Affected products

VendorProductAffectedFixed
ESET, spol. s r.o. ESET NOD32 Antivirus — 1464
ESET, spol. s r.o. ESET Internet Security — 1464
ESET, spol. s r.o. ESET Smart Security Premium — 1464
ESET, spol. s r.o. ESET Security Ultimate — 1464
ESET, spol. s r.o. ESET Endpoint Antivirus — 1464
ESET, spol. s r.o. ESET Endpoint Security — 1464
ESET, spol. s r.o. ESET Endpoint Antivirus for Linux 10.0 and above — 1464
ESET, spol. s r.o. ESET Server Security for Windows Server — 1464
ESET, spol. s r.o. ESET Mail Security for Microsoft Exchange Server — 1464
ESET, spol. s r.o. ESET Mail Security for IBM Domino — 1464
ESET, spol. s r.o. ESET Security for Microsoft SharePoint Server — 1464
ESET, spol. s r.o. ESET File Security for Microsoft Azure — 1464
ESET, spol. s r.o. ESET Server Security for Linux 10.1 and above — 1464

Advisories 1

References