PT-2021-22568 · Gnome+8 · Gnome Grilo+8
CVSS v3.1
5.9
Medium
| Vector | AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions:
GNOME grilo versions prior to 0.3.14
Description:
The issue is related to the lack of TLS certificate verification in the SoupSessionAsync objects created by grl-net-wc.c, making users susceptible to network man-in-the-middle (MITM) attacks.
Recommendations:
For versions prior to 0.3.14, update to version 0.3.14 or later to enable TLS certificate verification and prevent MITM attacks.
Fix
Improper Certificate Validation
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Almalinux
Centos
Gnome Grilo
Linuxmint
Red Hat
Rocky Linux
Suse
Ubuntu