CVE Catalog

CVE-2000-0519

Low
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Very high risk
4.84%

91th percentile — higher than 91% of all known CVEs

Summary

Internet Explorer 4.x and 5.x does not properly re-validate an SSL certificate if the user establishes a new SSL session with the same server during the same Internet Explorer session.

Risk Assessment

This may lead to exploitation of vulnerabilities, allowing attackers to impersonate trusted servers.

Recommendation

It is recommended to update Internet Explorer to the latest version or switch to a more secure web browser.

Original NVD description (English source)

Internet Explorer 4.x and 5.x does not properly re-validate an SSL certificate if the user establishes a new SSL session with the same server during the same Internet Explorer session, aka one of two different "SSL Certificate Validation" vulnerabilities.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS