Beveiligingsadvies

CVE-2026-3336

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-03-02 21:15:16

Laatst bijgewerkt 2026-08-21 12:13:00

Toegewezen door AMZN

CVSS-score 8.7

Status PUBLISHED

Beschrijving

Improper certificate validation in PKCS7_verify() in AWS-LC allows an unauthenticated user to bypass certificate chain verification when processing PKCS7 objects with multiple signers, except the final signer. Customers of AWS services do not need to take action. Applications using AWS-LC should upgrade to AWS-LC version 1.69.0.

← Alle CVE's bekijken Bekijk op cve.org ↗