Lucene search

K
ubuntuUbuntuUSN-1779-1
HistoryMar 25, 2013 - 12:00 a.m.

GNOME Online Accounts vulnerability

2013-03-2500:00:00
ubuntu.com
38

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

AI Score

6.3

Confidence

Low

EPSS

0.003

Percentile

68.0%

Releases

  • Ubuntu 12.10
  • Ubuntu 12.04
  • Ubuntu 11.10

Packages

  • gnome-online-accounts - GNOME Online Accounts

Details

It was discovered that GNOME Online Accounts did not properly check SSL
certificates when configuring online accounts. If a remote attacker were
able to perform a machine-in-the-middle attack, this flaw could be exploited to
alter or compromise credentials and confidential information.

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

AI Score

6.3

Confidence

Low

EPSS

0.003

Percentile

68.0%