← Database

CVE-2021-40855

CRITICAL CVSS: 9.8 Published: 2022-01-21 Modified: 2026-06-17

Description

The EU Technical Specifications for Digital COVID Certificates before 1.1 mishandle certificate governance. A non-production public key certificate could have been used in production.

Affected Platforms

Europa Technical Specifications For Digital Covid Certificates

Weakness Type

CWE-295

References