CVE-2023-6056: Insecure Trust of Self-Signed Certificates in Bitdefender Total Security HTTPS Scanning (VA-11164)
A vulnerability has been discovered in Bitdefender Total Security HTTPS scanning functionality that results in the improper trust of self-signed certificates. The product is found to trust certificates signed with the RIPEMD-160 hashing algorithm without proper validation, allowing an attacker to establish MITM SSL connections to arbitrary sites.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2023-6056?
CVE-2023-6056 is classified as a medium severity vulnerability due to its impact on the integrity of secure communications.
How do I fix CVE-2023-6056?
To fix CVE-2023-6056, users should update their Bitdefender Total Security to the latest version that addresses this vulnerability.
What is the impact of CVE-2023-6056?
The impact of CVE-2023-6056 allows attackers to exploit the improper trust of self-signed certificates, potentially leading to man-in-the-middle attacks.
Which versions of Bitdefender Total Security are affected by CVE-2023-6056?
CVE-2023-6056 affects all versions of Bitdefender Total Security up to version 27.0.25.115.
Is there any workaround for CVE-2023-6056?
As of now, the best way to mitigate CVE-2023-6056 is to ensure you are using the latest version of Bitdefender Total Security, as no official workaround has been provided.