Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mcq7-35g4-3c5q

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 8.1

Описание

It was discovered evolution-ews before 3.31.3 does not check the validity of SSL certificates. An attacker could abuse this flaw to get confidential information by tricking the user into connecting to a fake server without the user noticing the difference.

It was discovered evolution-ews before 3.31.3 does not check the validity of SSL certificates. An attacker could abuse this flaw to get confidential information by tricking the user into connecting to a fake server without the user noticing the difference.

EPSS

Процентиль: 45%
0.00227
Низкий

8.1 High

CVSS3

Дефекты

CWE-295

Связанные уязвимости

CVSS3: 8.1
ubuntu
больше 6 лет назад

It was discovered evolution-ews before 3.31.3 does not check the validity of SSL certificates. An attacker could abuse this flaw to get confidential information by tricking the user into connecting to a fake server without the user noticing the difference.

CVSS3: 8.1
redhat
почти 7 лет назад

It was discovered evolution-ews before 3.31.3 does not check the validity of SSL certificates. An attacker could abuse this flaw to get confidential information by tricking the user into connecting to a fake server without the user noticing the difference.

CVSS3: 8.1
nvd
больше 6 лет назад

It was discovered evolution-ews before 3.31.3 does not check the validity of SSL certificates. An attacker could abuse this flaw to get confidential information by tricking the user into connecting to a fake server without the user noticing the difference.

CVSS3: 8.1
debian
больше 6 лет назад

It was discovered evolution-ews before 3.31.3 does not check the valid ...

oracle-oval
около 6 лет назад

ELSA-2019-3699: evolution security and bug fix update (MODERATE)

EPSS

Процентиль: 45%
0.00227
Низкий

8.1 High

CVSS3

Дефекты

CWE-295