Search vulnerabilities

Results 1

Export CSV
CVE-2019-3890

evolution-ews: all certificate errors ignored if error is ignored during initial account setup in gnome-online-accounts

It was discovered evolution-ews before 3.31.3 does not check the validity of SSL certificates. An attacker could abuse this flaw to get confidential information by tricking the user into connecting to a fake server without the user noticing the difference.

CVSS 3.0 · 8.1 High EPSS < 1% KEV · Not listed
Vendors