PT-2021-22564 · Gnome+7 · Gnome Libgfbgraph+7
CVSS v3.1
7.5
High
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions:
GNOME libgfbgraph versions prior to 0.2.5
Description:
The issue is related to the lack of TLS certificate verification in the SoupSessionSync objects created by gfbgraph-photo.c, making users susceptible to network man-in-the-middle (MITM) attacks.
Recommendations:
For versions prior to 0.2.5, update to version 0.2.5 or later to enable TLS certificate verification and prevent MITM attacks.
Fix
Improper Certificate Validation
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Almalinux
Centos
Debian
Gnome Libgfbgraph
Red Hat
Rocky Linux
Suse