Description
A vulnerability has been discovered in Bitdefender Total Security HTTPS scanning functionality that results in the improper trust of self-signed certificates. The product is found to trust certificates signed with the RIPEMD-160 hashing algorithm without proper validation, allowing an attacker to establish MITM SSL connections to arbitrary sites.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| BItdefender | Total Security | < 27.0.25.115 | 27.0.25.115 |
Advisories 1
- WID-SEC-2024-3235 Bitdefender Total Security: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen BSI CERT-Bund (WID) · Oct 17, 2024