CVEvulnerability

CVE-2023-34410

5.3 MEDIUM Published 2023-06-05 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2023-06-05
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Weaknesses
CWE-295

Description

An issue was discovered in Qt before 5.15.15, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.2. Certificate validation for TLS does not always consider whether the root of a chain is a configured CA certificate.

Affected configurations

• debian debian linux 10.0 • fedoraproject fedora 38 • qt qt (>= 5.13.0 < 5.15.15) • qt qt (>= 6.0.0 < 6.2.9) • qt qt (>= 6.3.0 < 6.5.2)

Related

Weakness · CWE (1)

  • CWE-295 Improper Certificate Validation weakness

References