CVE-2020-10659
MEDIUMEntrust Entelligence Security Provider <10.0.60 - Info Disclosure
Title source: llmDescription
Entrust Entelligence Security Provider (ESP) before 10.0.60 on Windows mishandles errors during SSL Certificate Validation, leading to situations where (for example) a user continues to interact with a web site that has an invalid certificate chain.
References (2)
Core 2
Core References
Broken Link x_refsource_misc
https://github.com/etherpacket/CVD-Applications/blob/master/EDC%20Security%20Bulletin%20E19-001a.pdf
Broken Link x_refsource_misc
https://github.com/etherpacket/CVD-Applications/blob/master/eespwin_10_10060_readme.pdf
Scores
CVSS v3
4.3
EPSS
0.0037
EPSS Percentile
29.1%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Details
CWE
CWE-295
Status
published
Products (1)
entrustdatacard/entelligence_security_provider
< 10.0.60
Published
Mar 18, 2020
Tracked Since
Feb 18, 2026