cbcvebase.
CVE-2002-2125
published 2002-12-31

CVE-2002-2125: Internet Explorer 6.0 does not warn users when an expired certificate authority (CA) certificate is submitted to the user and a newer CA certificate is in the…

PriorityP418medium6.4CVSS 2.0
AVNACLAuNCPIPAN
EPSS
8.26%
94.3th percentile
Internet Explorer 6.0 does not warn users when an expired certificate authority (CA) certificate is submitted to the user and a newer CA certificate is in the user's local repository, which could allow remote attackers to decrypt web sessions via a man-in-the-middle (MITM) attack.

Affected

3 ranges
VendorProductVersion rangeFixed in
microsoftie——
microsoftinternet_explorer——
microsoftinternet_explorer——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.