Lucene search

K
osvGoogleOSV:CVE-2019-3890
HistoryAug 01, 2019 - 2:15 p.m.

CVE-2019-3890

2019-08-0114:15:13
Google
osv.dev
4

AI Score

6.2

Confidence

Low

EPSS

0.001

Percentile

45.6%

It was discovered evolution-ews before 3.31.3 does not check the validity of SSL certificates. An attacker could abuse this flaw to get confidential information by tricking the user into connecting to a fake server without the user noticing the difference.