Medium severity4.3NVD Advisory· Published Mar 18, 2020· Updated Jun 17, 2026

CVE-2020-10659

Description

Entrust Entelligence Security Provider (ESP) before 10.0.60 on Windows mishandles errors during SSL Certificate Validation, leading to situations where (for example) a user continues to interact with a web site that has an invalid certificate chain.

Affected products

Entrustdatacard/Entelligence Security Provider
cpe:2.3:a:entrustdatacard:entelligence_security_provider:*:*:*:*:*:*:*:*
Range: <10.0.60
Entrust/Entelligence Security Providerdescription
Entrust/Entelligence Security Providerllm-fuzzy
Range: <10.0.60

Patches

Vulnerability mechanics

References

github.com/etherpacket/CVD-Applications/blob/master/EDC%20Security%20Bulletin%20E19-001a.pdfnvdBroken Link
github.com/etherpacket/CVD-Applications/blob/master/eespwin_10_10060_readme.pdfnvdBroken Link

News mentions

No linked articles in our index yet.

cvss	0.280
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000