VYPR
← All advisories
High severity7.4NVD Advisory· Published Oct 18, 2024· Updated Jun 17, 2026

CVE-2023-49570

CVE-2023-49570

Description

A vulnerability has been identified in Bitdefender Total Security HTTPS scanning functionality where the software trusts a certificate issued by an entity that isn't authorized to issue certificates. This occurs when the "Basic Constraints" extension in the certificate indicates that it is meant to be an "End Entity”. This flaw could allow an attacker to perform a Man-in-the-Middle (MITM) attack, intercepting and potentially altering communications between the user and the website.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Bitdefender/Total Securityllm-fuzzy3 versions
    (expand)+ 2 more
    • (no CPE)
    • (no CPE)range: 0
    • cpe:2.3:a:bitdefender:total_security:*:*:*:*:*:*:*:*range: <27.0.25.115

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.