DSA Signature Vulnerability in Bitdefender Total Security HTTPS Scanning

CVE-2023-6057

What is CVE-2023-6057?

A security issue has emerged in Bitdefender Total Security, specifically affecting its HTTPS scanning feature. The vulnerability centers around the improper validation of certificates that are issued using the DSA signature algorithm. This flaw allows the software to inadequately check the certificate chain, creating an avenue for attackers to potentially perform man-in-the-middle SSL attacks, thereby intercepting and manipulating the communication with arbitrary sites using malicious DSA-signed certificates. For more detailed information, please refer to the official security advisory.

References