CVE-2023-37920: Certifi's removal of e-Tugra root certificate
First published: Tue Jul 25 2023(Updated: )
An unspecified error with the removal of e-Tugra root certificate in Certifi has an unknown impact and attack vector.
Credit: security-advisories@github.com security-advisories@github.com security-advisories@github.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Kennethreitz Certifi | >=2015.04.28<2023.07.22 | |
| pip/certifi | >=2015.4.28<2023.7.22 | 2023.7.22 |
| redhat/certifi | <2023.07.22 | 2023.07.22 |
| IBM SOAR QRadar Plugin App | <=1.0 - 5.0.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://groups.google.com/a/mozilla.org/g/dev-security-policy/c/C-HrP1SEq1A
- https://github.com/certifi/python-certifi/security/advisories/GHSA-xqr8-7jwr-rhp7
- https://github.com/certifi/python-certifi/commit/8fb96ed81f71e7097ed11bc4d9b19afd7ea5c909
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5EX6NG7WUFNUKGFHLM35KHHU3GAKXRTG/
- https://nvd.nist.gov/vuln/detail/CVE-2023-37920
- https://github.com/pypa/advisory-database/tree/main/vulns/certifi/PYSEC-2023-135.yaml
- https://github.com/advisories/GHSA-xqr8-7jwr-rhp7 (Advisory)
- https://exchange.xforce.ibmcloud.com/vulnerabilities/261639
- https://www.ibm.com/support/pages/node/7111679 (Advisory)
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2227191
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2227190
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2227187
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2227196
- https://access.redhat.com/errata/RHSA-2023:6812
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2248948
- https://access.redhat.com/errata/RHSA-2023:7378
- https://access.redhat.com/errata/RHSA-2023:7385
- https://access.redhat.com/errata/RHSA-2023:7407
- https://access.redhat.com/errata/RHSA-2023:7435
- https://access.redhat.com/errata/RHSA-2023:7523
- https://access.redhat.com/errata/RHSA-2023:7528
- https://access.redhat.com/errata/RHSA-2023:7753
- https://access.redhat.com/errata/RHSA-2024:0133
- https://access.redhat.com/errata/RHSA-2024:8228
- https://bugzilla.redhat.com/show_bug.cgi?id=2226586
- collector/nvd-latest
- collector/nvd-api
- collector/nvd-index
- collector/nvd-cve
- collector/github-advisory-latest
- alias/GHSA-xqr8-7jwr-rhp7
- alias/CVE-2023-37920
- collector/github-advisory
- agent/type
- agent/first-publish-date
- agent/author
- agent/severity
- agent/remedy
- agent/weakness
- agent/description
- collector/ibm-support
- source/IBM
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/softwarecombine
- agent/title
- agent/event
- collector/mitre-cve
- source/MITRE
- collector/redhat-bugzilla
- source/Red Hat
- agent/references
- agent/last-modified-date
- agent/tags
- agent/trending
- vendor/kennethreitz
- canonical/kennethreitz certifi
- version/kennethreitz certifi/2015.04.28
- package-manager/pip
- vendor/ibm
- canonical/ibm soar qradar plugin app
- version/ibm soar qradar plugin app/1.0 - 5.0.3
- package-manager/redhat