CVE-2023-0464
CVE Details
Last Update
8/16/2024
NIST CVE Summary
A security vulnerability has been identified in all supported versions of OpenSSL related to the verification of X.509 certificate chains that include policy constraints.
Our Official Summary
This is a false positive reported by twistlock. We have confirmed this CVE is fixed in the FIPS openSSL version 1.1.1f-1ubuntu2.fips.22 that’s being used in VerteX. You can learn more about this CVE at https://ubuntu.com/security/CVE-2023-0464.
CVE Severity
Status
Ongoing
Affected Products & Versions
- Palette VerteX 4.4.11
- Palette VerteX 4.4.14
Revision History
- 1.0 07/16/2024 Initial Publication
- 2.0 08/16/2024 Added palette VerteX 4.4.14 to Affected Products