VDB

GCVE-110-CERTCC-2015-591120

GCVE-110-CERTCC-2015-591120
Advisory PublishedCVSS 6.4/10
Vulnetix · Advisory published December 31, 2008
Multiple SSL certificate authorities may issue certificates to a customer based solely on the control of certain email addresses. This may allow an attacker to obtain a valid SSL certificate to perform HTTPS spoofing without generating a warning in the client software.
Download JSON Open in Console

Risk Scores

CVSS 2.0
6.4/10
Medium · AV:A/AC:M/Au:N/C:C/I:P/A:N
certcc-cam
certcc-cam
impact0population0exploitation0widely_known0score_current0ease_of_exploitation0
certcc-vrda
certcc-vrda
d1_impact3d1_population4d1_direct_report1
certcc-cvss-temporal-env
certcc-cvss-temporal-env
temporal_score6.4remediation_levelUreport_confidenceCenvironmental_score6.38063133792target_distributionHenvironmental_vectorCDP:ND/TD:H/CR:ND/IR:ND/AR:ND

References

Multiple SSL certificate authorities use predefined email addresses as proof of domain ownership
url
Multiple SSL certificate authorities use predefined email addresses as proof of domain ownership
url
Multiple SSL certificate authorities use predefined email addresses as proof of domain ownership
url
Multiple SSL certificate authorities use predefined email addresses as proof of domain ownership
url
Multiple SSL certificate authorities use predefined email addresses as proof of domain ownership
url
Multiple SSL certificate authorities use predefined email addresses as proof of domain ownership
url
Multiple SSL certificate authorities use predefined email addresses as proof of domain ownership
url
Multiple SSL certificate authorities use predefined email addresses as proof of domain ownership
url
Multiple SSL certificate authorities use predefined email addresses as proof of domain ownership
url
Multiple SSL certificate authorities use predefined email addresses as proof of domain ownership
url
Multiple SSL certificate authorities use predefined email addresses as proof of domain ownership
url
Multiple SSL certificate authorities use predefined email addresses as proof of domain ownership
url
Multiple SSL certificate authorities use predefined email addresses as proof of domain ownership
url
Multiple SSL certificate authorities use predefined email addresses as proof of domain ownership
url
Multiple SSL certificate authorities use predefined email addresses as proof of domain ownership
url
Multiple SSL certificate authorities use predefined email addresses as proof of domain ownership
url
Multiple SSL certificate authorities use predefined email addresses as proof of domain ownership
url
Multiple SSL certificate authorities use predefined email addresses as proof of domain ownership
url
Multiple SSL certificate authorities use predefined email addresses as proof of domain ownership
url
Multiple SSL certificate authorities use predefined email addresses as proof of domain ownership
url
Multiple SSL certificate authorities use predefined email addresses as proof of domain ownership
url
Multiple SSL certificate authorities use predefined email addresses as proof of domain ownership
url
Multiple SSL certificate authorities use predefined email addresses as proof of domain ownership
url
Multiple SSL certificate authorities use predefined email addresses as proof of domain ownership
url
Multiple SSL certificate authorities use predefined email addresses as proof of domain ownership
url
Multiple SSL certificate authorities use predefined email addresses as proof of domain ownership
url
Multiple SSL certificate authorities use predefined email addresses as proof of domain ownership
url
Multiple SSL certificate authorities use predefined email addresses as proof of domain ownership
url
Multiple SSL certificate authorities use predefined email addresses as proof of domain ownership
url
Multiple SSL certificate authorities use predefined email addresses as proof of domain ownership
url
Multiple SSL certificate authorities use predefined email addresses as proof of domain ownership
advisory
Multiple SSL certificate authorities use predefined email addresses as proof of domain ownership
advisory
Multiple SSL certificate authorities use predefined email addresses as proof of domain ownership
advisory

Browse GCVE Records

73,118 records in the GCVE database · Updated July 16, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›