Servers and applications
CVE-2025-4575
Issue summary: Use of -addreject option with the openssl x509 application adds a trusted use instead of a rejected use for a certificate. Impact summary: If a user intends to make a trusted certificate rejected for a particular use it will be instead marked as trusted for that use. A copy & paste error during minor refactoring of the code introduced this issue in the OpenSSL 3.5 version. If, for…
- Severity
- Medium 6.5
- Published
- 22 May 2025
- Last changed
- 17 Jun 2026
- Added to UpHeron
- 21 Oct 2026
- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
OpenSSLServers and applications · cpe:a:openssl:openssl |
|