The EU Technical Specifications for Digital COVID Certificates before 1.1 mishandle certificate governance. A non-production public key certificate could have been used in production.
References
Link | Resource |
---|---|
https://github.com/eu-digital-green-certificates/dgc-overview/security/advisories/GHSA-xcvc-p4fw-qmcj | Third Party Advisory |
https://www.consilium.europa.eu/en/policies/coronavirus/eu-digital-covid-certificate/ | Product Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2022-01-21 16:15
Updated : 2024-02-28 18:48
NVD link : CVE-2021-40855
Mitre link : CVE-2021-40855
CVE.ORG link : CVE-2021-40855
JSON object : View
Products Affected
europa
- technical_specifications_for_digital_covid_certificates
CWE
CWE-295
Improper Certificate Validation