Every CVE Search/ Get API key

CVE-2022-23491

Removal of TrustCor root certificate

6.8 MediumFix available

Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi 2022.12.07 removes root certificates from "TrustCor" from the root store. These are in the process of being removed from Mozilla's trust store. TrustCor's root certificates are being removed pursuant to an investigation prompted by media reporting that TrustCor's ownership also operated a business that produced spyware. Conclusions of Mozilla's investigation can be found in the linked google group discussion.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
High
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
High
Availability
None

Exploit likelihood

0.53%Down 0.4 points since Dec 8, 2022
90%50%10%1%

What each source reports

CVE List Score used 6.8

Removal of TrustCor root certificate

Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi 2022.12.07 removes root certificates from "TrustCor" from the root store. These are in the process of being removed from Mozilla's trust store. TrustCor's root certificates are being removed pursuant to an investigation prompted by media reporting that TrustCor's ownership also operated a business that produced spyware. Conclusions of Mozilla's investigation can be found in the linked google group discussion.

Record
CVE-2022-23491
CVSS 3.1
6.8 MediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N
Weakness
CWE-345
Updated
2026-11-02
EUVDEUVD-2022-0037 6.8

Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi 2022.12.07 removes root certificates from "TrustCor" from the root store. These are in the process of being removed from Mozilla's trust store. TrustCor's root certificates are being removed pursuant to an investigation prompted by media reporting that TrustCor's ownership also operated a business that produced spyware. Conclusions of Mozilla's investigation can be found in the linked google group discussion.

Record
EUVD-2022-0037
CVSS 3.1
6.8 MediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N
Updated
2026-11-02
GitHub AdvisoriesGHSA-43fp-rhv2-5gv8 5.9

Certifi removing TrustCor root certificate

Certifi 2022.12.07 removes root certificates from "TrustCor" from the root store. These are in the process of being removed from Mozilla's trust store.

TrustCor's root certificates are being removed pursuant to an investigation prompted by media reporting that TrustCor's ownership also operated a business that produced spyware. Conclusions of Mozilla's investigation can be found here.

Record
GHSA-43fp-rhv2-5gv8
CVSS 4.0
5.9 MediumCVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
CVSS 3.1
6.8 MediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N
Weakness
CWE-345
Updated
2026-11-02
NVD 6.8

Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi 2022.12.07 removes root certificates from "TrustCor" from the root store. These are in the process of being removed from Mozilla's trust store. TrustCor's root certificates are being removed pursuant to an investigation prompted by media reporting that TrustCor's ownership also operated a business that produced spyware. Conclusions of Mozilla's investigation can be found in the linked google group discussion.

Record
CVE-2022-23491
CVSS 3.1
6.8 MediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Weakness
CWE-345
Updated
2026-11-02
OSV 6.8

Removal of TrustCor root certificate

Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi 2022.12.07 removes root certificates from "TrustCor" from the root store. These are in the process of being removed from Mozilla's trust store. TrustCor's root certificates are being removed pursuant to an investigation prompted by media reporting that TrustCor's ownership also operated a business that produced spyware. Conclusions of Mozilla's investigation can be found in the linked google group discussion.

Record
CVE-2022-23491
CVSS 3.1
6.8 MediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N
Weakness
CWE-345
Updated
2026-11-02
OSVDEBIAN-CVE-2022-23491 7.5

Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi 2022.12.07 removes root certificates from "TrustCor" from the root store. These are in the process of being removed from Mozilla's trust store. TrustCor's root certificates are being removed pursuant to an investigation prompted by media reporting that TrustCor's ownership also operated a business that produced spyware. Conclusions of Mozilla's investigation can be found in the linked google group discussion.

Record
DEBIAN-CVE-2022-23491
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Updated
2026-11-03
Show 15 moreShow less
OSVGHSA-43fp-rhv2-5gv8 5.9

Certifi removing TrustCor root certificate

Certifi 2022.12.07 removes root certificates from "TrustCor" from the root store. These are in the process of being removed from Mozilla's trust store.

TrustCor's root certificates are being removed pursuant to an investigation prompted by media reporting that TrustCor's ownership also operated a business that produced spyware. Conclusions of Mozilla's investigation can be found here.

Record
GHSA-43fp-rhv2-5gv8
CVSS 4.0
5.9 MediumCVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
CVSS 3.1
6.8 MediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N
Weakness
CWE-345
Updated
2026-11-02
OSVOESA-2023-1457 7.5

python-certifi security update

Certifi provides Mozilla carefully curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. It has been extracted from the Requests project

Security Fix(es):

Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi 2022.12.07 removes root certificates from "TrustCor" from the root store. These are in the process of being removed from Mozilla's trust store. TrustCor's root certificates are being removed pursuant to an investigation prompted by media reporting that TrustCor's ownership also operated a business that produced spyware. Conclusions of Mozilla's investigation can be found in the linked google group discussion.(CVE-2022-23491)

Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi prior to version 2023.07.22 recognizes "e-Tugra" root certificates. e-Tugra's root certificates were subject to an investigation prompted by reporting of security issues in their systems. Certifi 2023.07.22 removes root certificates from "e-Tugra" from the root store.(CVE-2023-37920)

Record
OESA-2023-1457
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Updated
2026-11-02
OSVRHBA-2023:0589 7.5

Red Hat Bug Fix Advisory: Red Hat Ansible Automation Platform 2.3 Product Release Update

Record
RHBA-2023:0589
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Updated
2026-11-02
OSVRHSA-2025:9775 7.5

Red Hat Security Advisory: Red Hat Ceph Storage 8.1 security, bug fix, and enhancement updates

Record
RHSA-2025:9775
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVROOT-APP-PYPI-CVE-2022-23491 6.8

CVE-2022-23491 in certifi - Patched by Root

Root has patched CVE-2022-23491 in the certifi package for Root:PyPI. Multiple fixed versions available.

Record
ROOT-APP-PYPI-CVE-2022-23491
CVSS 3.1
6.8 MediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N
Updated
2026-11-02
OSVUBUNTU-CVE-2022-23491 7.5

Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi 2022.12.07 removes root certificates from "TrustCor" from the root store. These are in the process of being removed from Mozilla's trust store. TrustCor's root certificates are being removed pursuant to an investigation prompted by media reporting that TrustCor's ownership also operated a business that produced spyware. Conclusions of Mozilla's investigation can be found in the linked google group discussion.

Record
UBUNTU-CVE-2022-23491
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS 3.1
6.8 MediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N
Updated
2026-11-02
OSVCLSA-2026-1785934477 No score

TuxCare security update for certifi (2 CVEs)

TuxCare rebuilt certifi to address 2 CVEs. Fixed in 2021.10.8.post4+tuxcare.

Record
CLSA-2026-1785934477
Updated
2026-11-02
OSVMGASA-2023-0140 No score

Updated python-certifi packages fix security vulnerability

Disable bundled Trustcor root cerificate signatures generated after Wednesday November 30 00:00:00 2022. (CVE-2022-23491)

Record
MGASA-2023-0140
Updated
2026-11-02
OSVopenSUSE-SU-2024:13237-1 No score

python310-certifi-2023.7.22-2.1 on GA media

These are all security issues fixed in the python310-certifi-2023.7.22-2.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:13237-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:11421-1 No score

python313-certifi-2026.7.22-1.1 on GA media

These are all security issues fixed in the python313-certifi-2026.7.22-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:11421-1
Updated
2026-11-02
OSVPYSEC-2022-42986 No score

Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi 2022.12.07 removes root certificates from "TrustCor" from the root store. These are in the process of being removed from Mozilla's trust store. TrustCor's root certificates are being removed pursuant to an investigation prompted by media reporting that TrustCor's ownership also operated a business that produced spyware. Conclusions of Mozilla's investigation can be found in the linked google group discussion.

Record
PYSEC-2022-42986
Updated
2026-11-02
OSVSUSE-SU-2023:0118-1 No score

Security update for mozilla-nss

This update for mozilla-nss fixes the following issues:

  • CVE-2022-3479: Fixed a potential crash that could be triggered when a server requested a client authentication certificate, but the client had no certificates stored (bsc#1204272).
  • Updated to version 3.79.3 (bsc#1207038):
    • CVE-2022-23491: Removed trust for 3 root certificates from TrustCor.
Record
SUSE-SU-2023:0118-1
Updated
2026-11-02
OSVSUSE-SU-2023:0119-1 No score

Security update for mozilla-nss

This update for mozilla-nss fixes the following issues:

  • CVE-2022-3479: Fixed a potential crash that could be triggered when a server requested a client authentication certificate, but the client had no certificates stored (bsc#1204272).
  • Updated to version 3.79.3 (bsc#1207038):
    • CVE-2022-23491: Removed trust for 3 root certificates from TrustCor.
Record
SUSE-SU-2023:0119-1
Updated
2026-11-02
OSVSUSE-SU-2023:0130-1 No score

Security update for mozilla-nss

This update for mozilla-nss fixes the following issues:

  • CVE-2022-3479: Fixed a potential crash that could be triggered when a server requested a client authentication certificate, but the client had no certificates stored (bsc#1204272).
  • Updated to version 3.79.3 (bsc#1207038):
    • CVE-2022-23491: Removed trust for 3 root certificates from TrustCor.
Record
SUSE-SU-2023:0130-1
Updated
2026-11-02
OSVSUSE-SU-2023:0139-1 No score

Security update for python-certifi

This update for python-certifi fixes the following issues:

  • remove all TrustCor CAs, as TrustCor issued multiple man-in-the-middle certs (bsc#1206212 CVE-2022-23491)
    • TrustCor RootCert CA-1
    • TrustCor RootCert CA-2
    • TrustCor ECA-1
  • Add removeTrustCor.patch
Record
SUSE-SU-2023:0139-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
certifi
PyPI
 2017.11.05 up to 2022.12.07
2022.12.07
certifi
TuxCare:PyPI
From an advisory covering 2 CVEs
 2021.10.8 up to 2021.10.8.post4+tuxcare, plus listed versions
2021.10.8.post1+tuxcare2021.10.8.post3+tuxcare
2021.10.8.post4+tuxcare
python-certifi
Debian:12
 All versions, plus listed versions
2022.9.24-12023.11.17-12023.7.22-12024.12.14+ds-12024.6.2-1
Show 12 moreShow less
2024.8.30+dfsg-12024.8.30-12025.1.31+ds-12025.11.12+ds-12026.1.4+ds-12026.10.19+ds-12026.10.23+ds-12026.2.25+ds-12026.4.22+ds-12026.5.20+ds-12026.6.17+ds-12026.7.22+ds-1
 None known
python-certifi
Debian:13
 before 2023.7.22-1
2023.7.22-1
python-certifi
Debian:14
 before 2023.7.22-1
2023.7.22-1
certifi
PyPI
 2017.11.05 up to 2022.12.07, plus listed versions
2017.11.52018.1.182018.10.152018.11.292018.4.16
Show 21 moreShow less
2018.8.132018.8.242019.11.282019.3.92019.6.162019.9.112020.11.82020.12.52020.4.52020.4.5.12020.4.5.22020.6.202021.10.82021.5.302022.5.182022.5.18.12022.6.152022.6.15.12022.6.15.22022.9.142022.9.24
2022.12.07
python-certifi
Mageia:8
 before 2022.12.7-1.mga8
2022.12.7-1.mga8
python-certifi
openEuler:20.03-LTS-SP1
From an advisory covering 2 CVEs
 before 2023.7.22-1.oe1
2023.7.22-1.oe1
python-certifi
openEuler:20.03-LTS-SP3
From an advisory covering 2 CVEs
 before 2023.7.22-1.oe1
2023.7.22-1.oe1
python-certifi
openEuler:22.03-LTS
From an advisory covering 2 CVEs
 before 2023.7.22-1.oe2203sp2
2023.7.22-1.oe2203sp2
Show 137 moreShow less
Affected packages
PackageAffectedFixed
python-certifi
openEuler:22.03-LTS-SP1
From an advisory covering 2 CVEs
 before 2023.7.22-1.oe2203sp1
2023.7.22-1.oe2203sp1
python-certifi
openEuler:22.03-LTS-SP2
From an advisory covering 2 CVEs
 before 2023.7.22-1.oe2203sp2
2023.7.22-1.oe2203sp2
certifi
PyPI
 2017.11.5 up to 2022.12.7, plus listed versions
2018.1.182018.10.152018.11.292018.4.162018.8.13
Show 20 moreShow less
2018.8.242019.11.282019.3.92019.6.162019.9.112020.11.82020.12.52020.4.52020.4.5.12020.4.5.22020.6.202021.10.82021.5.302022.5.182022.5.18.12022.6.152022.6.15.12022.6.15.22022.9.142022.9.24
2022.12.7
python39-certifi
Red Hat:ansible_automation_platform:2.3::el8
 before 0:2022.12.7-1.el8ap
0:2022.12.7-1.el8ap
ceph
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
ceph-base
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
ceph-base-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
ceph-common
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
ceph-common-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
ceph-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
ceph-debugsource
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
ceph-exporter-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
ceph-fuse
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
ceph-fuse-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
ceph-immutable-object-cache
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
ceph-immutable-object-cache-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
ceph-mds-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
ceph-mgr-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
ceph-mib
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
ceph-mon-client-nvmeof-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
ceph-mon-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
ceph-osd-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
ceph-radosgw-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
ceph-resource-agents
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
ceph-selinux
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
ceph-test-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
cephadm
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
cephadm-ansible
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 1:4.1.4-1.el9cp
1:4.1.4-1.el9cp
cephfs-mirror-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
cephfs-top
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
libcephfs-daemon-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
libcephfs-devel
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
libcephfs-proxy2
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
libcephfs-proxy2-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
libcephfs2
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
libcephfs2-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
libcephsqlite-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
liboath
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 0:2.6.12-1.el9cp
0:2.6.12-1.el9cp
liboath-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 0:2.6.12-1.el9cp
0:2.6.12-1.el9cp
libpskc-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 0:2.6.12-1.el9cp
0:2.6.12-1.el9cp
librados-devel
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
librados-devel-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
librados2
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
librados2-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
libradospp-devel
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
libradosstriper1
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
libradosstriper1-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
librbd-devel
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
librbd1
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
librbd1-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
librgw-devel
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
librgw2
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
librgw2-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
oath-toolkit
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 0:2.6.12-1.el9cp
0:2.6.12-1.el9cp
oath-toolkit-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 0:2.6.12-1.el9cp
0:2.6.12-1.el9cp
oath-toolkit-debugsource
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 0:2.6.12-1.el9cp
0:2.6.12-1.el9cp
oathtool-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 0:2.6.12-1.el9cp
0:2.6.12-1.el9cp
pam_oath-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 0:2.6.12-1.el9cp
0:2.6.12-1.el9cp
pskctool-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 0:2.6.12-1.el9cp
0:2.6.12-1.el9cp
python3-ceph-argparse
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
python3-ceph-common
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
python3-cephfs
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
python3-cephfs-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
python3-rados
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
python3-rados-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
python3-rbd
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
python3-rbd-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
python3-rgw
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
python3-rgw-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
rbd-fuse-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
rbd-mirror-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
rbd-nbd
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
rbd-nbd-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
certifi
Root:PyPI
 before 2020.12.5+aikido.3
2020.12.5+aikido.32019.11.28+aikido.2
mozilla-nss
SUSE:OpenStack Cloud 9
From an advisory covering 2 CVEs
 before 3.79.3-58.91.1
3.79.3-58.91.1
mozilla-nss
SUSE:OpenStack Cloud Crowbar 9
From an advisory covering 2 CVEs
 before 3.79.3-58.91.1
3.79.3-58.91.1
mozilla-nss
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
From an advisory covering 2 CVEs
 before 3.79.3-58.91.1
3.79.3-58.91.1
mozilla-nss
SUSE:Linux Enterprise Software Development Kit 12 SP5
From an advisory covering 2 CVEs
 before 3.79.3-58.91.1
3.79.3-58.91.1
mozilla-nss
SUSE:Linux Enterprise Server 12 SP2-BCL
From an advisory covering 2 CVEs
 before 3.79.3-58.91.1
3.79.3-58.91.1
mozilla-nss
SUSE:Linux Enterprise Server 12 SP4-LTSS
From an advisory covering 2 CVEs
 before 3.79.3-58.91.1
3.79.3-58.91.1
mozilla-nss
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 2 CVEs
 before 3.79.3-58.91.1
3.79.3-58.91.1
mozilla-nss
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 2 CVEs
 before 3.79.3-58.91.1
3.79.3-58.91.1
mozilla-nss
SUSE:Linux Enterprise Micro 5.3
From an advisory covering 2 CVEs
 before 3.79.3-150400.3.23.1
3.79.3-150400.3.23.1
mozilla-nss
SUSE:Linux Enterprise Module for Basesystem 15 SP4
From an advisory covering 2 CVEs
 before 3.79.3-150400.3.23.1
3.79.3-150400.3.23.1
mozilla-nss
openSUSE:Leap Micro 5.3
From an advisory covering 2 CVEs
 before 3.79.3-150400.3.23.1
3.79.3-150400.3.23.1
mozilla-nss
openSUSE:Leap 15.4
From an advisory covering 2 CVEs
 before 3.79.3-150400.3.23.1
3.79.3-150400.3.23.1
mozilla-nss
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
From an advisory covering 2 CVEs
 before 3.79.3-150000.3.90.1
3.79.3-150000.3.90.1
mozilla-nss
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
From an advisory covering 2 CVEs
 before 3.79.3-150000.3.90.1
3.79.3-150000.3.90.1
mozilla-nss
SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS
From an advisory covering 2 CVEs
 before 3.79.3-150000.3.90.1
3.79.3-150000.3.90.1
mozilla-nss
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
From an advisory covering 2 CVEs
 before 3.79.3-150000.3.90.1
3.79.3-150000.3.90.1
mozilla-nss
SUSE:Linux Enterprise Real Time 15 SP3
From an advisory covering 2 CVEs
 before 3.79.3-150000.3.90.1
3.79.3-150000.3.90.1
mozilla-nss
SUSE:Linux Enterprise Server 15 SP1-LTSS
From an advisory covering 2 CVEs
 before 3.79.3-150000.3.90.1
3.79.3-150000.3.90.1
mozilla-nss
SUSE:Linux Enterprise Server 15 SP2-LTSS
From an advisory covering 2 CVEs
 before 3.79.3-150000.3.90.1
3.79.3-150000.3.90.1
mozilla-nss
SUSE:Linux Enterprise Server 15 SP3-LTSS
From an advisory covering 2 CVEs
 before 3.79.3-150000.3.90.1
3.79.3-150000.3.90.1
mozilla-nss
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
From an advisory covering 2 CVEs
 before 3.79.3-150000.3.90.1
3.79.3-150000.3.90.1
mozilla-nss
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
From an advisory covering 2 CVEs
 before 3.79.3-150000.3.90.1
3.79.3-150000.3.90.1
mozilla-nss
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
From an advisory covering 2 CVEs
 before 3.79.3-150000.3.90.1
3.79.3-150000.3.90.1
mozilla-nss
SUSE:Manager Proxy 4.2
From an advisory covering 2 CVEs
 before 3.79.3-150000.3.90.1
3.79.3-150000.3.90.1
mozilla-nss
SUSE:Manager Retail Branch Server 4.2
From an advisory covering 2 CVEs
 before 3.79.3-150000.3.90.1
3.79.3-150000.3.90.1
mozilla-nss
SUSE:Manager Server 4.2
From an advisory covering 2 CVEs
 before 3.79.3-150000.3.90.1
3.79.3-150000.3.90.1
mozilla-nss
SUSE:Linux Enterprise Micro 5.1
From an advisory covering 2 CVEs
 before 3.79.3-150000.3.90.1
3.79.3-150000.3.90.1
mozilla-nss
SUSE:Linux Enterprise Micro 5.2
From an advisory covering 2 CVEs
 before 3.79.3-150000.3.90.1
3.79.3-150000.3.90.1
mozilla-nss
SUSE:Enterprise Storage 6
From an advisory covering 2 CVEs
 before 3.79.3-150000.3.90.1
3.79.3-150000.3.90.1
mozilla-nss
SUSE:Enterprise Storage 7
From an advisory covering 2 CVEs
 before 3.79.3-150000.3.90.1
3.79.3-150000.3.90.1
mozilla-nss
SUSE:Enterprise Storage 7.1
From an advisory covering 2 CVEs
 before 3.79.3-150000.3.90.1
3.79.3-150000.3.90.1
mozilla-nss
openSUSE:Leap Micro 5.2
From an advisory covering 2 CVEs
 before 3.79.3-150000.3.90.1
3.79.3-150000.3.90.1
python-certifi
SUSE:Linux Enterprise Micro 5.3
 before 2018.1.18-150000.3.3.1
2018.1.18-150000.3.3.1
python-certifi
SUSE:Linux Enterprise Module for Basesystem 15 SP4
 before 2018.1.18-150000.3.3.1
2018.1.18-150000.3.3.1
python-certifi
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
 before 2018.1.18-150000.3.3.1
2018.1.18-150000.3.3.1
python-certifi
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
 before 2018.1.18-150000.3.3.1
2018.1.18-150000.3.3.1
python-certifi
SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS
 before 2018.1.18-150000.3.3.1
2018.1.18-150000.3.3.1
python-certifi
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
 before 2018.1.18-150000.3.3.1
2018.1.18-150000.3.3.1
python-certifi
SUSE:Linux Enterprise Real Time 15 SP3
 before 2018.1.18-150000.3.3.1
2018.1.18-150000.3.3.1
python-certifi
SUSE:Linux Enterprise Server 15 SP1-LTSS
 before 2018.1.18-150000.3.3.1
2018.1.18-150000.3.3.1
python-certifi
SUSE:Linux Enterprise Server 15 SP2-LTSS
 before 2018.1.18-150000.3.3.1
2018.1.18-150000.3.3.1
python-certifi
SUSE:Linux Enterprise Server 15 SP3-LTSS
 before 2018.1.18-150000.3.3.1
2018.1.18-150000.3.3.1
python-certifi
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
 before 2018.1.18-150000.3.3.1
2018.1.18-150000.3.3.1
python-certifi
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
 before 2018.1.18-150000.3.3.1
2018.1.18-150000.3.3.1
python-certifi
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
 before 2018.1.18-150000.3.3.1
2018.1.18-150000.3.3.1
python-certifi
SUSE:Manager Proxy 4.2
 before 2018.1.18-150000.3.3.1
2018.1.18-150000.3.3.1
python-certifi
SUSE:Manager Retail Branch Server 4.2
 before 2018.1.18-150000.3.3.1
2018.1.18-150000.3.3.1
python-certifi
SUSE:Manager Server 4.2
 before 2018.1.18-150000.3.3.1
2018.1.18-150000.3.3.1
python-certifi
SUSE:Linux Enterprise Micro 5.1
 before 2018.1.18-150000.3.3.1
2018.1.18-150000.3.3.1
python-certifi
SUSE:Linux Enterprise Micro 5.2
 before 2018.1.18-150000.3.3.1
2018.1.18-150000.3.3.1
python-certifi
SUSE:Enterprise Storage 6
 before 2018.1.18-150000.3.3.1
2018.1.18-150000.3.3.1
python-certifi
SUSE:Enterprise Storage 7
 before 2018.1.18-150000.3.3.1
2018.1.18-150000.3.3.1
python-certifi
SUSE:Enterprise Storage 7.1
 before 2018.1.18-150000.3.3.1
2018.1.18-150000.3.3.1
python-certifi
openSUSE:Leap Micro 5.2
 before 2018.1.18-150000.3.3.1
2018.1.18-150000.3.3.1
python-certifi
openSUSE:Leap Micro 5.3
 before 2018.1.18-150000.3.3.1
2018.1.18-150000.3.3.1
python-certifi
openSUSE:Leap 15.4
 before 2018.1.18-150000.3.3.1
2018.1.18-150000.3.3.1
ca-certificates
Ubuntu:Pro:14.04:LTS
 before 20211016~14.04.1~esm1, plus listed versions
201306102013090620130906ubuntu120130906ubuntu220141019ubuntu0.14.04.1
Show 5 moreShow less
20160104ubuntu0.14.04.120170717~14.04.120170717~14.04.220190110~14.04.1~esm120190110~14.04.1~esm2
20211016~14.04.1~esm1
ca-certificates
Ubuntu:Pro:16.04:LTS
 before 20211016~16.04.1~esm2, plus listed versions
20150426ubuntu120160104ubuntu120170717~16.04.120170717~16.04.220190110~16.04.1
Show 4 moreShow less
20201027ubuntu0.16.04.120210119~16.04.120210119~16.04.1ubuntu0.1~esm120211016~16.04.1~esm1
20211016~16.04.1~esm2
ca-certificates
Ubuntu:18.04:LTS
 before 20211016ubuntu0.18.04.1, plus listed versions
201707172018040920190110~18.04.120201027ubuntu0.18.04.120210119~18.04.120210119~18.04.220211016~18.04.1
20211016ubuntu0.18.04.1
ca-certificates
Ubuntu:20.04:LTS
 before 20211016ubuntu0.20.04.1, plus listed versions
2019011020190110ubuntu120190110ubuntu1.120201027ubuntu0.20.04.120210119~20.04.120210119~20.04.220211016~20.04.1
20211016ubuntu0.20.04.1
ca-certificates
Ubuntu:22.04:LTS
 before 20211016ubuntu0.22.04.1, plus listed versions
20210119ubuntu120211016
20211016ubuntu0.22.04.1
python-certifi
openSUSE:Tumbleweed
 before 2023.7.22-2.1
2023.7.22-2.1
python-certifi
openSUSE:Tumbleweed
From an advisory covering 2 CVEs
 before 2026.7.22-1.1
2026.7.22-1.1

History

History
RecordedChangedSources
affected, factsOSV
affectedOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2022-23491 is a medium vulnerability (CVSS 6.8) in Certifi, published December 7, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.53%, the 44th percentile. Fixed in certifi 2022.12.07.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 186 references. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open