Back to Database
Status published
High
CVE-2023-6056
Insecure Trust of Self-Signed Certificates in Bitdefender Total Security HTTPS Scanning (VA-11164)
Vulnerability Description
A vulnerability has been discovered in Bitdefender Total Security HTTPS scanning functionality that results in the improper trust of self-signed certificates. The product is found to trust certificates signed with the RIPEMD-160 hashing algorithm without proper validation, allowing an attacker to establish MITM SSL connections to arbitrary sites.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-6056
Credits & Attribution
No credits recorded in the NVD database.
Affected Vendor
BItdefender
View all reports →Affected Software
Total Security
Vulnerable Versions:
0
Timeline
Official Publish:
October 18th, 2024
Last Modified:
October 18th, 2024
Added to House:
July 22nd, 2026