Lucene search
+L

2 matches found

Mend
Mend
•added 2020/09/27 3:30 a.m.•3 views

CVE-2020-26117

In rfb/CSecurityTLS.cxx and rfb/CSecurityTLS.java in TigerVNC before 1.11.0, viewers mishandle TLS certificate exceptions. They store the certificates as authorities, meaning that the owner of a certificate could impersonate any server after a client had added an exception...

8.6CVSS0.0306EPSS
SaveExploits0References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/09/27 12:00 a.m.•2 views

CVE-2020-26117: Improper Certificate Validation

In rfb/CSecurityTLS.cxx and rfb/CSecurityTLS.java in TigerVNC before 1.11.0, viewers mishandle TLS certificate exceptions. They store the certificates as authorities, meaning that the owner of a certificate could impersonate any server after a client had added an exception...

8.1CVSS5.8AI score0.0306EPSS
SaveExploits0References2
Rows per page
Query Builder