Description
Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi prior to version 2023.07.22 recognizes "e-Tugra" root certificates. e-Tugra's root certificates were subject to an investigation prompted by reporting of security issues in their systems. Certifi 2023.07.22 removes root certificates from "e-Tugra" from the root store.
Scores
CVSS v3
7.5
EPSS
0.0011
EPSS Percentile
29.2%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
yes
Technical Impact
partial
Details
CWE
CWE-345
Status
published
Products (9)
certifi/certifi
2015.4.28 - 2023.7.22
fedoraproject/fedora
38
netapp/active_iq_unified_manager
(2 CPE variants)
netapp/management_services_for_element_software
netapp/management_services_for_netapp_hci
netapp/ontap_mediator
netapp/ontap_select_deploy_administration_utility
netapp/solidfire_\&_hci_storage_node
pypi/certifi
2015.4.28 - 2023.7.22PyPI
Published
Jul 25, 2023
Tracked Since
Feb 18, 2026