QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2019-11727

Back to search

CVE-2019-11727

Published: Jul 23, 2019

Modified: Aug 4, 2024

PUBLISHED

Description

A vulnerability exists where it possible to force Network Security Services (NSS) to sign CertificateVerify with PKCS#1 v1.5 signatures when those are the only ones advertised by server in CertificateRequest in TLS 1.3. PKCS#1 v1.5 signatures should not be used for TLS 1.3 messages. This vulnerability affects Firefox < 68.

VendorProductVersions

Mozilla

Firefox

affected
unspecified - < 68

References

RHSA-2019:1951
vendor-advisory
x_refsource_REDHAT
GLSA-201908-12
vendor-advisory
x_refsource_GENTOO
openSUSE-SU-2019:2248
vendor-advisory
x_refsource_SUSE
openSUSE-SU-2019:2249
vendor-advisory
x_refsource_SUSE
openSUSE-SU-2019:2251
vendor-advisory
x_refsource_SUSE
openSUSE-SU-2019:2260
vendor-advisory
x_refsource_SUSE
openSUSE-SU-2020:0008
vendor-advisory
x_refsource_SUSE

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now
CVE-2019-11727 - Security Vulnerability | QwikSec