The security vulnerability allows attackers to spoof a target certificate and masquerade as any website, among other things.