CVE-2003-0960: Openca

High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days.

OpenCA before 0.9.1.4 does not use the correct certificate in a chain to check the serial, which could cause OpenCA to accept revoked or expired certificates.

Affected products

• Openca Openca: version 0.8.0 only; version 0.8.1 only; version 0.8.6 only; version 0.9.0 only; version 0.9.0.1 only; version 0.9.0.2 only; …

Published 2003-12-15. Last modified 2026-06-16.