Lucene search

K
cvelistMitreCVELIST:CVE-2021-39361
HistoryAug 22, 2021 - 6:46 p.m.

CVE-2021-39361

2021-08-2218:46:17
mitre
www.cve.org
8
gnome evolution-rss
network-soup.c
tls certificate verification
soupsessionsync
mitm attacks
cve-2021-39361
cve-2016-20011

AI Score

6.7

Confidence

High

EPSS

0.003

Percentile

70.2%

In GNOME evolution-rss through 0.3.96, network-soup.c does not enable TLS certificate verification on the SoupSessionSync objects it creates, leaving users vulnerable to network MITM attacks. NOTE: this is similar to CVE-2016-20011.

AI Score

6.7

Confidence

High

EPSS

0.003

Percentile

70.2%