Nexpose Vulnerability Database
- Try searching for a product or vendor.
- Only vulnerabilities that match all search terms will be returned.
- Enclose search terms in double quotes for an exact search.
- For CVE searches, only enter the CVE-YYYY-XXXX code.
Get Nexpose now
Search vulnerabilities with Rapid7's vulnerability management solution
FREE DOWNLOADUntrusted TLS/SSL server X.509 certificate
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| Severe (4) | 5.8 (AV:N/AC:M/Au:N/C:P/I:P/A:N) | Jan 1, 1995 | Oct 19, 2009 | Sep 2, 2010 |
Description:
The server's TLS/SSL certificate is signed by a Certification Authority (CA) that is not a well-known, trusted one. It could indicate that a TLS/SSL man-in-the-middle is taking place and is eavesdropping on TLS/SSL connections.
Vulnerability Management
Get your solution now
Solution:
Resign certificate with trusted CA
Obtain a new certificate signed by a trusted CA, such as Thawte or Verisign.
The exact instructions for obtaining a new certificate depend on your organization's requirements. Generally, you will need to generate a certificate request and save the request as a file. This file is then sent to a Certificate Authority (CA) for processing. After you have received a new certificate file from the Certificate Authority, you will have to install it on the TLS/SSL server. The exact instructions for installing a certificate differ for each product. Follow their documentation.
Download Nexpose
Download our vulnerability management solution, Nexpose, for free today. Scan 100% of your infrastructure for vulnerabilities, understand your risk exposure, compare and prioritize your vulnerabilities and verify that they are remediated.