CVE-2020-16162

HIGH

RIPE NCC RPKI Validator 3.x < 3.1-2020.07.06.14.28 - Improper Certificate Validation

Title source: llm
STIX 2.1

Description

An issue was discovered in RIPE NCC RPKI Validator 3.x through 3.1-2020.07.06.14.28. Missing validation checks on CRL presence or CRL staleness in the X509-based RPKI certificate-tree validation procedure allow remote attackers to bypass intended access restrictions by using revoked certificates. NOTE: there may be counterarguments related to backwards compatibility

References (2)

Core 2
Core References
Third Party Advisory x_refsource_misc
https://github.com/RIPE-NCC/rpki-validator-3/issues/162
Third Party Advisory x_refsource_misc
https://github.com/RIPE-NCC/rpki-validator-3/issues/232

Scores

CVSS v3 7.5
EPSS 0.0074
EPSS Percentile 49.9%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Details

CWE
CWE-295
Status published
Products (1)
ripe/rpki_validator_3 3.0 - 3.1-2020.07.06.14.28
Published Jul 30, 2020
Tracked Since Feb 18, 2026