Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9hvv-q3hq-r4f2

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 3.7

Описание

Shotwell version 0.22.0 (and possibly other versions) is vulnerable to a TLS/SSL certification validation flaw resulting in a potential for man in the middle attacks.

Shotwell version 0.22.0 (and possibly other versions) is vulnerable to a TLS/SSL certification validation flaw resulting in a potential for man in the middle attacks.

EPSS

Процентиль: 61%
0.00412
Низкий

3.7 Low

CVSS3

Дефекты

CWE-295

Связанные уязвимости

CVSS3: 3.7
ubuntu
больше 9 лет назад

Shotwell version 0.22.0 (and possibly other versions) is vulnerable to a TLS/SSL certification validation flaw resulting in a potential for man in the middle attacks.

CVSS3: 3.1
redhat
больше 10 лет назад

Shotwell version 0.22.0 (and possibly other versions) is vulnerable to a TLS/SSL certification validation flaw resulting in a potential for man in the middle attacks.

CVSS3: 3.7
nvd
больше 9 лет назад

Shotwell version 0.22.0 (and possibly other versions) is vulnerable to a TLS/SSL certification validation flaw resulting in a potential for man in the middle attacks.

CVSS3: 3.7
debian
больше 9 лет назад

Shotwell version 0.22.0 (and possibly other versions) is vulnerable to ...

EPSS

Процентиль: 61%
0.00412
Низкий

3.7 Low

CVSS3

Дефекты

CWE-295