Beveiligingsadvies

CVE-2025-7395

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-07-18 22:15:59
Laatst bijgewerkt 2025-07-21 14:56:52
Toegewezen door wolfSSL
CVSS-score 9.2
Status PUBLISHED

Beschrijving

A certificate verification error in wolfSSL when building with the WOLFSSL_SYS_CA_CERTS and WOLFSSL_APPLE_NATIVE_CERT_VALIDATION options results in the wolfSSL client failing to properly verify the server certificate's domain name, allowing any certificate issued by a trusted CA to be accepted regardless of the hostname.