Riskcovery

CVE-2023-0465

Invalid certificate policies in leaf certificates are silently ignored

State
Published
Severity
5.3 Medium
Published
Mar 28, 2023
Updated
Oct 14, 2026
Reserved
Jan 24, 2023

Read the record on cve.org

Description

Applications that use a non-default option when verifying certificates may be vulnerable to an attack from a malicious CA to circumvent certain checks.

Invalid certificate policies in leaf certificates are silently ignored by OpenSSL and other certificate policy checks are skipped for that certificate. A malicious CA could use this to deliberately assert invalid certificate policies in order to circumvent policy checking on the certificate altogether.

Policy processing is disabled by default but can be enabled by passing the `-policy' argument to the command line utilities or by calling the `X509_VERIFY_PARAM_set1_policies()' function.

Scores

CVSSScoreVectorSource
3.15.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:NCISA-ADP

Weaknesses

  • CWE-295 Improper Certificate Validation

Affected Products

ProductVersions
OpenSSLOpenSSL
  • 3.1.0 to before 3.1.1Affected
  • 3.0.0 to before 3.0.9Affected
  • 1.1.1 to before 1.1.1uAffected
  • 1.0.2 to before 1.0.2zhAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.