[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fQGeGkk3dzU2a95ISlNJXgGxN-7z4ayXZfYKJaDyPiDw":3,"g5a-risk:CVE-2024-39689":160},{"success":4,"data":5,"meta":157},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":36,"epssPercentile":26,"epssTimeSeries":37,"severity":38,"affectedProducts":39,"affectedProductsCount":56,"references":57,"referencesCount":83,"weaknesses":84,"weaknessesCount":93,"isActivelyExploited":94,"cisaInfo":26,"otxData":26,"relatedBlogPosts":95,"seoMetadata":96,"configurations":121,"relatedVendorCves":141,"notableEvents":142},"CVE-2024-39689","What is CVE-2024-39689?","Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi starting in 2021.5.30 and prior to 2024.7.4 recognized root certificates from `GLOBALTRUST`. Certifi 2024.7.04 removes root certificates from `GLOBALTRUST` from the root store. These are in the process of being removed from Mozilla's trust store. `GLOBALTRUST`'s root certificates are being removed pursuant to an investigation which identified \"long-running and unresolved compliance issues.\"","Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certif...","2024-07-05T19:15:10.247","2026-06-17T07:42:28.64",7.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":33,"CVSSMetricV2":34,"CVSSMetricV40":35},[16,29],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"security-advisories@github.com","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":23,"IntegrityImpact":25,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,3.9,3.6,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":23,"IntegrityImpact":25,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},[],[],[],0.01049,[36,36,36,36,36,36,36],"High",[40,44,49,52],{"vendor":41,"product":41,"version":42,"criteria":43,"vulnerable":4},"certifi","*","cpe:2.3:a:certifi:certifi:*:*:*:*:*:python:*:*",{"vendor":45,"product":46,"version":47,"criteria":48,"vulnerable":4},"netapp","management_services_for_element_software_and_netapp_hci","-","cpe:2.3:a:netapp:management_services_for_element_software_and_netapp_hci:-:*:*:*:*:*:*:*",{"vendor":45,"product":50,"version":47,"criteria":51,"vulnerable":4},"ontap_select_deploy_administration_utility","cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-:*:*:*:*:*:*:*",{"vendor":45,"product":53,"version":54,"criteria":55,"vulnerable":4},"ontap_tools","10","cpe:2.3:a:netapp:ontap_tools:10:*:*:*:*:vmware_vsphere:*:*",4,[58,63,67,72,74,76,78],{"url":59,"source":60,"tags":61},"https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi\u002Fcommit\u002Fbd8153872e9c6fc98f4023df9c2deaffea2fa463","GitHub",[62],"Patch",{"url":64,"source":60,"tags":65},"https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi\u002Fsecurity\u002Fadvisories\u002FGHSA-248v-346w-9cwc",[66],"Vendor Advisory",{"url":68,"source":69,"tags":70},"https:\u002F\u002Fgroups.google.com\u002Fa\u002Fmozilla.org\u002Fg\u002Fdev-security-policy\u002Fc\u002FXpknYMPO8dI","Google",[71],"Mailing List",{"url":59,"source":60,"tags":73},[62],{"url":64,"source":60,"tags":75},[66],{"url":68,"source":69,"tags":77},[71],{"url":79,"source":80,"tags":81},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20241206-0001\u002F","Netapp",[82],"Third Party Advisory",7,[85],{"id":86,"name":87,"description":88,"extendedDescription":89,"status":90,"abstraction":91,"structure":92},"CWE-345","Insufficient Verification of Data Authenticity","The product does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data.","","Draft","Class","Simple",1,false,[],{"title":97,"metaDescription":98,"keywords":99,"canonicalUrl":100,"structuredData":101},"What is CVE-2024-39689? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2024-39689, a high severity cyber security vulnerability from 2024. Certifi is a curated collection of Root Certificates for va...","CVE-2024-39689, CVE-2024-39689 vulnerability, CVE-2024-39689 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2024, CVSS score, exploit, patch, remediation, certifi security, netapp security, certifi vulnerability, management_services_for_element_software_and_netapp_hci vulnerability, ontap_select_deploy_administration_utility vulnerability, ontap_tools vulnerability","\u002Fwhat-is\u002Fcve-2024-39689",{"@context":102,"@type":103,"headline":97,"description":98,"datePublished":10,"dateModified":11,"author":104,"publisher":108,"about":112,"mainEntityOfPage":116,"articleSection":119,"keywords":120},"https:\u002F\u002Fschema.org","TechArticle",{"@type":105,"name":106,"url":107},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":105,"name":106,"url":107,"logo":109},{"@type":110,"url":111},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":113,"name":6,"description":114,"additionalType":115},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":117,"@id":118},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2024-39689","Cybersecurity","CVE-2024-39689, CVE-2024-39689 vulnerability, CVE-2024-39689 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[122,131],{"Operator":26,"Negate":26,"Nodes":123},[124],{"Operator":125,"Negate":94,"CPEMatch":126},"OR",[127],{"Vulnerable":4,"Criteria":43,"MatchCriteriaID":128,"VersionStartExcluding":26,"VersionStartIncluding":129,"VersionEndExcluding":130,"VersionEndIncluding":26},"BCBAE7B1-6D3F-435F-9917-28DE8A8DA0B1","2021.5.30","2024.7.4",{"Operator":26,"Negate":26,"Nodes":132},[133],{"Operator":125,"Negate":94,"CPEMatch":134},[135,137,139],{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":136,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"FDAC85F0-93AF-4BE3-AE1A-8ADAF1CDF9AB",{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":138,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"E7CF3019-975D-40BB-A8A4-894E62BD3797",{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":140,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"5333B745-F7A3-46CB-8437-8668DB08CD6F",[],[143,150],{"id":144,"eventType":145,"eventTime":146,"details":147,"label":148,"color":149},"9f19af54-be4b-45fe-af63-0da4cf59829a","HIGH_EPSS_DELTA","2025-08-14T04:05:40.482921+00:00","Daily EPSS score increased by 0.193 on 2024-07-07","EPSS Score Increased","red",{"id":151,"eventType":152,"eventTime":153,"details":154,"label":155,"color":156},"a7c5b07f-b3da-4a72-a93a-85d125ba9054","LOW_EPSS_DELTA","2025-11-19T04:04:37.183577+00:00","Daily EPSS score decreased by 0.171 on 2024-07-07","EPSS Score Decreased","green",{"lastModified":11,"cacheTime":158,"version":159},1792375398328,"2.0",{"score":161,"band":162,"action":163,"scoredAt":164},46,"Medium","Plan remediation","2026-10-16T07:03:01.982612+00:00"]