CVE-2013-0240

CVE-2013-0240 affects GNOME Online Accounts (GOA) 3.4.x, 3.6.x before 3.6.3, and 3.7.x before 3.7.5, where SSL certificate validation for account providers (e.g., Windows Live, Facebook) is improper, enabling MITM to intercept credentials. Connected sources confirm this is a GOA SSL-validation fl...

CVE-2013-1799

CVE-2013-1799 affects GNOME Online Accounts (GOA) 3.6.x before 3.6.3 and 3.7.x before 3.7.91, where GOA does not properly validate SSL certificates for providers using libsoup, allowing a man‑in‑the‑middle to exfiltrate credentials. The issue is noted as stemming from an incomplete fix for CVE-20...