CVE-2025-12889 – TLS 1.2 Client Can Downgrade Digest Used

CVE ID : CVE-2025-12889

Published : Nov. 22, 2025, 12:15 a.m. | 1 hour, 1 minute ago

Description : With TLS 1.2 connections a client can use any digest, specifically a weaker digest that is supported, rather than those in the CertificateRequest.

Severity: 2.3 | LOW

Visit the link for more details, such as CVSS details, affected products, timeline, and more…