CVE-2002-0970 PUBLISHED CVSS 7.5 HIGH

The SSL capability for Konqueror in KDE 3.0.2 and earlier does not verify the Basic Constraints for an intermediate CA-signed certificate, which allows remote attackers to spoof the certificates of trusted sites via a man-in-the-middle attack.

EPSS 2.40% · 84.9th percentile

Risk Scores

CVSS v2.0
7.5
EPSS Score
2.40%
84.9th percentile

Affected Products

VendorProductVersions
n/an/an/a
kdekde3.0.2, 2.2.2, 3.0
kdekonqueror2.2.2, 3.0, 3.0.1

Timeline

References

Open in Interactive Console →