CVE-2013-1799 in GNOME
要約 (英語)
Gnome Online Accounts (GOA) 3.6.x before 3.6.3 and 3.7.x before 3.7.91, does not properly validate SSL certificates when creating accounts for providers who use the libsoup library, which allows man-in-the-middle attackers to obtain sensitive information such as credentials by sniffing the network. NOTE: this issue exists because of an incomplete fix for CVE-2013-0240.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
予約する
2013年02月19日
公開
2013年04月01日
ステータス
確認済み
エントリ
VulDB provides additional information and datapoints for this CVE:
| 識別子 | 脆弱性 | CWE | 悪用可 | 対策 | CVE |
|---|---|---|---|---|---|
| 7904 | GNOME SSL Certificate Verification Service 弱い暗号化 | 310 | 概念実証 | 公式な修正 | CVE-2013-1799 |