CVE-2019-3890
evolution-ews: all certificate errors ignored if error is ignored during initial account setup in gnome-online-accounts
It was discovered evolution-ews before 3.31.3 does not check the validity of SSL certificates. An attacker could abuse this flaw to get confidential information by tricking the user into connecting to a fake server without the user noticing the difference.
CVSS 3.0 · 8.1 High
EPSS < 1%
KEV · Not listed
Vendors
Products