VULNERABILITY INTELLIGENCE
CVE-2003-0960
CVSS score7.5 HIGH
EPSS probability0.73%
CISA KEVNot currently listed
Published2003-12-15
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P
Description
OpenCA before 0.9.1.4 does not use the correct certificate in a chain to check the serial, which could cause OpenCA to accept revoked or expired certificates.