CVE-2021-3003

Agenzia delle Entrate Desktop Telematico 1.0.0 contacts the jws.agenziaentrate.it server over cleartext HTTP, which allows man-in-the-middle attackers to spoof product updates...

CVE-2021-3003

Affected software: Agenzia delle Entrate Desktop Telematico 1.0.0. The vulnerability stems from contacting the jws.agenziaentrate.it server over cleartext HTTP, enabling a man-in-the-middle to spoof product updates. Underlying cause: lack of TLS for update channel. Impact: potential spoofed updat...