eMudhra Certificate Security Advisory: Upgrade NIM to v7.0.1865 or Later
We recommend that customers running an earlier version of NIM upgrade to v7.0.1865 or higher as soon as possible to address the eMudhra certificate trust issue.
Private keys associated with eight eMudhra intermediate certificate authorities were compromised. These keys could allow an attacker to impersonate trusted websites or services to applications that still trust the affected certificate chains. Details are available in the Mozilla incident report.
This issue is resolved in NIM v7.0.1865 and later.
Please schedule the upgrade during a maintenance window and verify your system connections afterward. If you cannot upgrade immediately, review our security advisory and remediation instructions.
For assistance with upgrading or applying the interim remediation, contact Tools4ever Support.
References