[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fOD6eiyW-N-gWd3MyYfYvY3fTYtel7apjenkb6F49kXY":3,"g5a-risk:CVE-2023-37920":181},{"success":4,"data":5,"meta":178},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":37,"epssPercentile":28,"epssTimeSeries":38,"severity":39,"affectedProducts":40,"affectedProductsCount":70,"references":71,"referencesCount":103,"weaknesses":104,"weaknessesCount":113,"isActivelyExploited":114,"cisaInfo":28,"otxData":28,"relatedBlogPosts":115,"seoMetadata":116,"configurations":141,"relatedVendorCves":176,"notableEvents":177},"CVE-2023-37920","What is CVE-2023-37920?","Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi prior to version 2023.07.22 recognizes \"e-Tugra\" root certificates. e-Tugra's root certificates were subject to an investigation prompted by reporting of security issues in their systems. Certifi 2023.07.22 removes root certificates from \"e-Tugra\" from the root store.","Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certif...","2023-07-25T21:15:10.827","2025-02-13T13:50:15.813",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":28,"CVSSMetricV2":28,"CVSSMetricV40":28},[16,31],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":29,"ImpactScore":30},"security-advisories@github.com","Secondary",{"Version":20,"VectorString":21,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":24,"IntegrityImpact":26,"AvailabilityImpact":24,"BaseScore":27,"BaseSeverity":26,"ExploitCodeMaturity":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"TemporalSeverity":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":24,"ModifiedAttackVector":28,"ModifiedAttackComplexity":28,"ModifiedPrivilegesRequired":28,"ModifiedUserInteraction":28,"ModifiedScope":28,"ModifiedConfidentialityImpact":28,"ModifiedIntegrityImpact":28,"ModifiedAvailabilityImpact":28,"EnvironmentalScore":28,"EnvironmentalSeverity":28},"3.1","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N","NETWORK","LOW","NONE","UNCHANGED","HIGH",7.5,null,3.9,3.6,{"Source":32,"Type":33,"CVSSData":34,"ExploitabilityScore":29,"ImpactScore":36},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":35,"ExploitCodeMaturity":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"TemporalSeverity":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":26,"ModifiedAttackVector":28,"ModifiedAttackComplexity":28,"ModifiedPrivilegesRequired":28,"ModifiedUserInteraction":28,"ModifiedScope":28,"ModifiedConfidentialityImpact":28,"ModifiedIntegrityImpact":28,"ModifiedAvailabilityImpact":28,"EnvironmentalScore":28,"EnvironmentalSeverity":28},"CRITICAL",5.9,0.00568,[37,37,37,37,37,37,37],"Critical",[41,45,50,55,58,61,64,67],{"vendor":42,"product":42,"version":43,"criteria":44,"vulnerable":4},"certifi","*","cpe:2.3:a:certifi:certifi:*:*:*:*:*:python:*:*",{"vendor":46,"product":47,"version":48,"criteria":49,"vulnerable":4},"fedoraproject","fedora","38","cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*",{"vendor":51,"product":52,"version":53,"criteria":54,"vulnerable":4},"netapp","active_iq_unified_manager","-","cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vsphere:*:*",{"vendor":51,"product":56,"version":53,"criteria":57,"vulnerable":4},"management_services_for_element_software","cpe:2.3:a:netapp:management_services_for_element_software:-:*:*:*:*:*:*:*",{"vendor":51,"product":59,"version":53,"criteria":60,"vulnerable":4},"management_services_for_netapp_hci","cpe:2.3:a:netapp:management_services_for_netapp_hci:-:*:*:*:*:*:*:*",{"vendor":51,"product":62,"version":53,"criteria":63,"vulnerable":4},"ontap_mediator","cpe:2.3:a:netapp:ontap_mediator:-:*:*:*:*:*:*:*",{"vendor":51,"product":65,"version":53,"criteria":66,"vulnerable":4},"ontap_select_deploy_administration_utility","cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-:*:*:*:*:*:*:*",{"vendor":51,"product":68,"version":53,"criteria":69,"vulnerable":4},"solidfire_\\&_hci_storage_node","cpe:2.3:a:netapp:solidfire_\\&_hci_storage_node:-:*:*:*:*:*:*:*",8,[72,77,81,87,91,93,95,97,99],{"url":73,"source":74,"tags":75},"https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi\u002Fcommit\u002F8fb96ed81f71e7097ed11bc4d9b19afd7ea5c909","GitHub",[76],"Patch",{"url":78,"source":74,"tags":79},"https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi\u002Fsecurity\u002Fadvisories\u002FGHSA-xqr8-7jwr-rhp7",[80],"Vendor Advisory",{"url":82,"source":83,"tags":84},"https:\u002F\u002Fgroups.google.com\u002Fa\u002Fmozilla.org\u002Fg\u002Fdev-security-policy\u002Fc\u002FC-HrP1SEq1A","Google",[85,86],"Mailing List","Third Party Advisory",{"url":88,"source":89,"tags":90},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002F5EX6NG7WUFNUKGFHLM35KHHU3GAKXRTG\u002F","Fedoraproject",[85],{"url":73,"source":74,"tags":92},[76],{"url":78,"source":74,"tags":94},[80],{"url":82,"source":83,"tags":96},[85,86],{"url":88,"source":89,"tags":98},[85],{"url":100,"source":101,"tags":102},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20240912-0002\u002F","Netapp",[86],9,[105],{"id":106,"name":107,"description":108,"extendedDescription":109,"status":110,"abstraction":111,"structure":112},"CWE-345","Insufficient Verification of Data Authenticity","The product does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data.","","Draft","Class","Simple",1,false,[],{"title":117,"metaDescription":118,"keywords":119,"canonicalUrl":120,"structuredData":121},"What is CVE-2023-37920? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2023-37920, a critical severity cyber security vulnerability from 2023. Certifi is a curated collection of Root Certificates fo...","CVE-2023-37920, CVE-2023-37920 vulnerability, CVE-2023-37920 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2023, CVSS score, exploit, patch, remediation, certifi security, fedoraproject security, netapp security, certifi vulnerability, fedora vulnerability, active_iq_unified_manager vulnerability, management_services_for_element_software vulnerability, management_services_for_netapp_hci vulnerability","\u002Fwhat-is\u002Fcve-2023-37920",{"@context":122,"@type":123,"headline":117,"description":118,"datePublished":10,"dateModified":11,"author":124,"publisher":128,"about":132,"mainEntityOfPage":136,"articleSection":139,"keywords":140},"https:\u002F\u002Fschema.org","TechArticle",{"@type":125,"name":126,"url":127},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":125,"name":126,"url":127,"logo":129},{"@type":130,"url":131},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":133,"name":6,"description":134,"additionalType":135},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":137,"@id":138},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2023-37920","Cybersecurity","CVE-2023-37920, CVE-2023-37920 vulnerability, CVE-2023-37920 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[142,151,157],{"Operator":28,"Negate":28,"Nodes":143},[144],{"Operator":145,"Negate":28,"CPEMatch":146},"OR",[147],{"Vulnerable":4,"Criteria":44,"MatchCriteriaID":148,"VersionStartExcluding":28,"VersionStartIncluding":149,"VersionEndExcluding":150,"VersionEndIncluding":28},"2FF2392F-9661-448D-BE25-4AD98BD5D808","2015.4.28","2023.7.22",{"Operator":28,"Negate":28,"Nodes":152},[153],{"Operator":145,"Negate":28,"CPEMatch":154},[155],{"Vulnerable":4,"Criteria":49,"MatchCriteriaID":156,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"CC559B26-5DFC-4B7A-A27C-B77DE755DFF9",{"Operator":28,"Negate":28,"Nodes":158},[159],{"Operator":145,"Negate":28,"CPEMatch":160},[161,163,166,168,170,172,174],{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":162,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"E8F29E19-3A64-4426-A2AA-F169440267CC",{"Vulnerable":4,"Criteria":164,"MatchCriteriaID":165,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*","B55E8D50-99B4-47EC-86F9-699B67D473CE",{"Vulnerable":4,"Criteria":57,"MatchCriteriaID":167,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"86B51137-28D9-41F2-AFA2-3CC22B4954D1",{"Vulnerable":4,"Criteria":60,"MatchCriteriaID":169,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"4455CF3A-CC91-4BE4-A7AB-929AC82E34F5",{"Vulnerable":4,"Criteria":63,"MatchCriteriaID":171,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"19DD87DA-6999-4B38-B953-BEC49760F2BF",{"Vulnerable":4,"Criteria":66,"MatchCriteriaID":173,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"E7CF3019-975D-40BB-A8A4-894E62BD3797",{"Vulnerable":4,"Criteria":69,"MatchCriteriaID":175,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"D452B464-1200-4B72-9A89-42DC58486191",[],[],{"lastModified":11,"cacheTime":179,"version":180},1792370480429,"2.0",{"score":182,"band":183,"action":184,"scoredAt":185},54,"Medium","Plan remediation","2026-10-16T06:58:43.004839+00:00"]