PT-2020-13176
CVE-2020-12637
·
تاريخ النشر
2020-05-09
·
تاريخ التحديث
2020-05-13
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Zulip Desktop versions prior to 5.2.0
Description
The issue is related to Missing SSL Certificate Validation. This occurred because all validation was inadvertently disabled during an attempt to recognize the ignoreCerts option.
Recommendations
For versions prior to 5.2.0, update to version 5.2.0 or later to resolve the issue. As a temporary workaround, consider disabling the use of the ignoreCerts option until a patch is available. Restrict access to sensitive resources that rely on SSL certificate validation to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾