Vulnerabilities (CVE)

Filtered by vendor Entrouvert Subscribe
Filtered by product Lasso
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2009-0050 1 Entrouvert 1 Lasso 2018-10-11 4.3 MEDIUM N/A
Lasso 2.2.1 and earlier does not properly check the return value from the OpenSSL DSA_verify function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to CVE-2008-5077.