CVE-2018-11712: Improper Certificate Validation

🗓️ 04 Jun 2018 00:00:00Reported by Rapid7Type

Improper certificate validation in WebKitGTK+ 2.20.0-2.20.1 WebSocket connections via libsoup.

Reporter	Title	Published	Views	Family All 32
Cent OS	PackageKit, accountsservice, adwaita, appstream, at, atk, baobab, bolt, brasero, cairo, cheese, clutter, compat, control, dconf, devhelp, ekiga, empathy, eog, evince, evolution, file, flatpak, folks, fontconfig, freetype, fribidi, fwupd, fwupdate, gcr, gdk, gdm, gedit, geoclue2, geocode, gjs, glade, glib, glib2, glibmm24, gnome, gnote, gobject, gom, google, grilo, gsettings, gspell, gssdp, gstreamer1, gtk, gtk3, gtksourceview3, gucharmap, gupnp, gvfs, harfbuzz, json, libappstream, libchamplain, libcroco, libgdata, libgee, libgepub, libgexiv2, libgnomekbd, libgovirt, libgtop2, libgweather, libgxps, libical, libmediaart, libosinfo, libpeas, librsvg2, libsecret, libsoup, libwayland, libwnck3, mozjs52, mutter, nautilus, openchange, osinfo, pango, poppler, python2, rest, rhythmbox, seahorse, shotwell, sushi, totem, upower, vala, valadoc, vino, vte, vte291, wayland, webkitgtk4, xdg, yelp, zenity security update	15 Nov 201818:43	–	centos
CVE	CVE-2018-11712	4 Jun 201814:00	–	cve
Cvelist	CVE-2018-11712	4 Jun 201814:00	–	cvelist
Debian CVE	CVE-2018-11712	4 Jun 201814:00	–	debiancve
EUVD	EUVD-2018-3731	7 Oct 202500:30	–	euvd
Tenable Nessus	GLSA-201808-04 : WebkitGTK+: Multiple vulnerabilities	23 Aug 201800:00	–	nessus
Tenable Nessus	openSUSE Security Update : webkit2gtk3 (openSUSE-2018-1288)	26 Oct 201800:00	–	nessus
Tenable Nessus	RHEL 7 : GNOME (RHSA-2018:3140)	5 Nov 201800:00	–	nessus
Tenable Nessus	RHEL 6 : webkitgtk (Unpatched Vulnerability)	11 May 202400:00	–	nessus
Tenable Nessus	RHEL 7 : webkitgtk (Unpatched Vulnerability)	11 May 202400:00	–	nessus