1 matches found
evolution-ews: all certificate errors ignored if error is ignored during initial account setup in gnome-online-accounts
It was discovered evolution-ews does not check the validity of SSL certificates. An attacker could abuse this flaw to get confidential information by tricking the user into connecting to a fake server without the user noticing the difference...
8.1CVSS7.4AI score0.0099EPSS
SaveExploits0References4
20