CVE-2020-35733

High

Description

An issue was discovered in Erlang/OTP before 23.2.2. The ssl application 10.2 accepts and trusts an invalid X.509 certificate chain to a trusted root Certification Authority.

SeverityHigh

CVSS7.5

Exploit probability67. percentile1.2%

Product

Erlang\/otp

PublishedJan 15, 2021

First seenJan 15, 2021

How to fix

Update

erlang erlang\/otp23.2.2 or later

Vendor advisories

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E4CXZWUOZELT7A5ZN6DJRQHX7L35V4PW/

Affected products

Product	Affected versions	Fixed in
erlang erlang\/otp	v < 23.2.2	23.2.2
fedoraproject fedora	33	—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.