https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T16:28:35.891052+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2019-36862 cnvd-2019-36862 2026-10-06T16:28:35.895990+00:00 cnvd-2019-36862 https://cve.radiocsirt.org/vuln/euvd-2026-56634 EUVD-2026-56634 2026-10-06T16:28:35.896025+00:00 EUVD-2026-56634 https://cve.radiocsirt.org/vuln/fkie_cve-2019-14823 fkie_cve-2019-14823 2026-10-06T16:28:35.896040+00:00

A flaw was found in the "Leaf and Chain" OCSP policy implementation in JSS' CryptoManager versions after 4.4.6, 4.5.3, 4.6.0, where it implicitly trusted the root certificate of a certificate chain. Applications using this policy may not properly verify the chain and could be vulnerable to attacks such as Man in the Middle.

 https://cve.radiocsirt.org/vuln/ghsa-45q2-f3rm-5r6v GHSA-45q2-f3rm-5r6v 2026-10-06T16:28:35.896072+00:00

A flaw was found in the "Leaf and Chain" OCSP policy implementation in JSS' CryptoManager versions after 4.4.6, 4.5.3, 4.6.0, where it implicitly trusted the root certificate of a certificate chain. Applications using this policy may not properly verify the chain and could be vulnerable to attacks such as Man in the Middle.

 https://cve.radiocsirt.org/vuln/gsd-2019-14823 gsd-2019-14823 2026-10-06T16:28:35.896090+00:00 gsd-2019-14823 https://cve.radiocsirt.org/vuln/rhsa-2019:3067 RHSA-2019:3067 — Red Hat Security Advisory: jss security update 2026-10-06T16:28:35.896101+00:00

JSS: OCSP policy "Leaf and Chain" implicitly trusts the root certificate

 https://cve.radiocsirt.org/vuln/rhsa-2019:3225 RHSA-2019:3225 — Red Hat Security Advisory: jss security update 2026-10-06T16:28:35.896119+00:00

JSS: OCSP policy "Leaf and Chain" implicitly trusts the root certificate