CVE-2019-3890
Summary
| CVE | CVE-2019-3890 |
|---|
| State | PUBLIC |
|---|
| Assigner | [email protected] |
|---|
| Source Priority | CVE Program / NVD first with legacy fallback |
|---|
| Published | 2019-08-01 14:15:00 UTC |
|---|
| Updated | 2019-10-09 23:49:00 UTC |
|---|
| Description | It was discovered evolution-ews before 3.31.3 does not check the validity of SSL certificates. An attacker could abuse this flaw to get confidential information by tricking the user into connecting to a fake server without the user noticing the difference. |
|---|
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|
| SSL Certificates are not validated (#27) · Issues · GNOME / evolution-ews · GitLab |
CONFIRM |
gitlab.gnome.org |
Issue Tracking, Third Party Advisory |
| Red Hat Customer Portal |
REDHAT |
access.redhat.com |
|
| 1678313 – (CVE-2019-3890) CVE-2019-3890 evolution-ews: all certificate errors ignored if error is ignored during initial account setup in gnome-online-accounts |
CONFIRM |
bugzilla.redhat.com |
Issue Tracking, Third Party Advisory |
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 377251 Alibaba Cloud Linux Security Update for evolution (ALINUX2-SA-2020:0059)
- 377392 Alibaba Cloud Linux Security Update for evolution (ALINUX3-SA-2022:0095)
- 377401 Alibaba Cloud Linux Security Update for evolution (ALINUX3-SA-2022:0045)
