Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-hcvp-gmj3-5g5v

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

In GNOME evolution-rss through 0.3.96, network-soup.c does not enable TLS certificate verification on the SoupSessionSync objects it creates, leaving users vulnerable to network MITM attacks. NOTE: this is similar to CVE-2016-20011.

In GNOME evolution-rss through 0.3.96, network-soup.c does not enable TLS certificate verification on the SoupSessionSync objects it creates, leaving users vulnerable to network MITM attacks. NOTE: this is similar to CVE-2016-20011.

EPSS

Процентиль: 30%
0.00107
Низкий

Дефекты

CWE-295

Связанные уязвимости

CVSS3: 5.9
ubuntu
больше 4 лет назад

In GNOME evolution-rss through 0.3.96, network-soup.c does not enable TLS certificate verification on the SoupSessionSync objects it creates, leaving users vulnerable to network MITM attacks. NOTE: this is similar to CVE-2016-20011.

CVSS3: 5.9
nvd
больше 4 лет назад

In GNOME evolution-rss through 0.3.96, network-soup.c does not enable TLS certificate verification on the SoupSessionSync objects it creates, leaving users vulnerable to network MITM attacks. NOTE: this is similar to CVE-2016-20011.

CVSS3: 5.9
debian
больше 4 лет назад

In GNOME evolution-rss through 0.3.96, network-soup.c does not enable ...

EPSS

Процентиль: 30%
0.00107
Низкий

Дефекты

CWE-295