Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9hvv-q3hq-r4f2

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 3.7

Описание

Shotwell version 0.22.0 (and possibly other versions) is vulnerable to a TLS/SSL certification validation flaw resulting in a potential for man in the middle attacks.

Shotwell version 0.22.0 (and possibly other versions) is vulnerable to a TLS/SSL certification validation flaw resulting in a potential for man in the middle attacks.

EPSS

Процентиль: 55%
0.00849
Низкий

3.7 Low

CVSS3

Дефекты

CWE-295

Связанные уязвимости

CVSS3: 3.7
ubuntu
почти 10 лет назад

Shotwell version 0.22.0 (and possibly other versions) is vulnerable to a TLS/SSL certification validation flaw resulting in a potential for man in the middle attacks.

CVSS3: 3.1
redhat
почти 11 лет назад

Shotwell version 0.22.0 (and possibly other versions) is vulnerable to a TLS/SSL certification validation flaw resulting in a potential for man in the middle attacks.

CVSS3: 3.7
nvd
почти 10 лет назад

Shotwell version 0.22.0 (and possibly other versions) is vulnerable to a TLS/SSL certification validation flaw resulting in a potential for man in the middle attacks.

CVSS3: 3.7
debian
почти 10 лет назад

Shotwell version 0.22.0 (and possibly other versions) is vulnerable to ...

EPSS

Процентиль: 55%
0.00849
Низкий

3.7 Low

CVSS3

Дефекты

CWE-295