CVE-2007-3564

7.5
CVSS v2.0 Base Score
2.30%
LOW RiskEPSS (82nd percentile)
NVD-CWE-Other

libcurl 7.14.0 through 7.16.3, when built with GnuTLS support, does not check SSL/TLS certificate expiration or activation dates, which allows remote attackers to bypass certain access restrictions.

Published: 7/18/2007
Modified: 6/16/2026
Back to CVE Lookup

Vulnerability Summary

CVSS v2 Score

7.5

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS Score (Exploitation Probability)

2.30%LOW Exploitation Risk
82nd percentile

This vulnerability has a 2.30% probability of being exploited in the next 30 days, ranking higher than 82% of all scored CVEs.

CWE Classification

NVD-CWE-Other
Advertisement