CVE-2013-5606: The CERT_VerifyCert function in lib/certhigh/certvfy.c in Mozilla Network Security Services (NSS) 3.15 befo...

Security readout for executives and security teams

CVE-2013-5606 is a certificate validation flaw in Mozilla NSS. In affected NSS 3.15 versions before 3.15.3, a crafted certificate with incompatible key usage could receive an unexpected verification result, potentially bypassing intended access restrictions. Likely exposure is systems, applications, OS packages, or appliances using Mozilla NSS 3.15 before 3.15.3, especially where certificate key-usage decisions affect authentication, authorization, or access control. The bundle lists multiple downstream vendor advisories, but exact product scope is incomplete. Prioritize remediation where NSS supports authentication, TLS client certificates, or certificate-based authorization. Business risk is unclear without asset mapping, but the vulnerability can affect trust decisions and appears in several vendor advisory streams. Mitigation focus: Upgrade Mozilla NSS to 3.15.3 or later where directly managed.; Apply fixed vendor packages for operating systems or appliances bundling NSS.; Review Mozilla and downstream vendor advisories for exact affected versions..

Prepared

Jun 14, 2026, 15:13 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.