An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. For example a constraint that excludes the subdomain test.example.com does not prevent a leaf certificate from claiming the SAN *.example.com.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade goUpgrade docker | Dec 5, 2025 | Dec 3, 2025 |
| Amazon Linux Ami 2 | — | Upgrade docker-debuginfoUpgrade golistUpgrade dockerUpgrade golang-github-cpuguy83-go-md2manUpgrade cri-toolsUpgrade containerd-debuginfoUpgrade nerdctl-debuginfoUpgrade cni-plugins-debuginfoUpgrade containerdUpgrade golang-miscUpgrade golist-debuginfoUpgrade soci-snapshotterUpgrade cri-tools-debuginfoUpgrade runc-debuginfoUpgrade golang-testsUpgrade golang-binUpgrade nerdctlUpgrade ecs-initUpgrade cni-pluginsUpgrade golang-sharedUpgrade amazon-ecr-credential-helper-debuginfoUpgrade runcUpgrade oci-add-hooks-debuginfoUpgrade golang-docsUpgrade oci-add-hooksUpgrade amazon-ecr-credential-helperUpgrade runfinch-finchUpgrade amazon-cloudwatch-agentUpgrade golang-srcUpgrade golangUpgrade containerd-stress | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade docker-debugsourceUpgrade golang-binUpgrade cni-pluginsUpgrade golang-docsUpgrade libcap-debugsourceUpgrade runcUpgrade containerd-debuginfoUpgrade golang-sharedUpgrade containerd-stressUpgrade libcap-debuginfoUpgrade containerdUpgrade amazon-ssm-agentUpgrade ecs-initUpgrade runc-debuginfoUpgrade captree-debuginfoUpgrade cni-plugins-debugsourceUpgrade oci-add-hooks-debugsourceUpgrade amazon-ecr-credential-helperUpgrade containerd-debugsourceUpgrade amazon-cloudwatch-agentUpgrade oci-add-hooks-debuginfoUpgrade nerdctlUpgrade containerd-stress-debuginfoUpgrade runc-debugsourceUpgrade soci-snapshotterUpgrade runfinch-finchUpgrade golang-srcUpgrade golang-testsUpgrade golang-miscUpgrade libcap-staticUpgrade docker-debuginfoUpgrade dockerUpgrade golangUpgrade cni-plugins-debuginfoUpgrade captreeUpgrade libcap-develUpgrade oci-add-hooksUpgrade libcap | Jan 12, 2026 | Dec 3, 2025 |
| Dell Idrac | — | Upgrade Dell iDRAC to the latest version | Jun 26, 2026 | Jun 25, 2026 |
| Freebsd | — | Upgrade oauth2-proxy | Jan 27, 2026 | Jan 18, 2026 |
| Huawei Euleros 2_0_sp12 | — | Upgrade golang-develUpgrade golangUpgrade golang-help | Mar 17, 2026 | Mar 16, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade golang-develUpgrade golang-helpUpgrade golang | Mar 10, 2026 | Mar 10, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Dec 3, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Dec 3, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub