CVE-2007-4594 - CVE House
Back to Database
Status published Medium CVE-2007-4594

Entrust Entelligence Security Provider (ESP) 8 does not properly validate...

Vulnerability Description

Entrust Entelligence Security Provider (ESP) 8 does not properly validate certificates in certain circumstances involving (1) a chain that omits the root Certification Authority (CA) certificate, or an application that specifies disregarding (2) unknown revocation statuses during path validation or (3) certain errors in the certification path, which might allow context-dependent attackers to spoof certificate authentication. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2007-4594

Credits & Attribution

No credits recorded in the NVD database.

References

More from entrust

View All →
CVE-2004-0369
Buffer overflow in Entrust LibKmp ISAKMP library, as used by...
High 7.5
CVE-2002-0712
Entrust Authority Security Manager (EASM) 6.0 does not properly require...
Low 2.1
CVE-2001-1024
login.gas.bat and other CGI scripts in Entrust getAccess allow remote...
High 7.5
CVE-2001-0853
Directory traversal vulnerability in Entrust GetAccess allows remote attackers to...
Medium 5

Affected Vendor

Affected Software

entelligence security provider
Vulnerable Versions:
8

Timeline

Official Publish: August 29th, 2007
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.