Lucene search

K
cvelistMitreCVELIST:CVE-2020-26117
HistorySep 27, 2020 - 3:30 a.m.

CVE-2020-26117

2020-09-2703:30:25
mitre
www.cve.org

7.9 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.6%

In rfb/CSecurityTLS.cxx and rfb/CSecurityTLS.java in TigerVNC before 1.11.0, viewers mishandle TLS certificate exceptions. They store the certificates as authorities, meaning that the owner of a certificate could impersonate any server after a client had added an exception.