Lucene search
Veracode Vulnerability DatabaseVERACODE:21835HistoryNov 06, 2019 - 12:21 a.m.
Authorization Bypass
2019-11-0600:21:11
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
EPSS
0.001
Percentile
45.6%
evolution-ews is vulnerable to authorization bypass. The vulnerability exists as all certificate errors ignored if configured to ignore an initial error in gnome-online-accounts creation resulting in the connection open to being viewed and modified.
References
access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.1_release_notes/
access.redhat.com/errata/RHSA-2019:3699
access.redhat.com/security/updates/classification/#moderate
bugzilla.redhat.com/show_bug.cgi?id=1713619
bugzilla.redhat.com/show_bug.cgi?id=1724232
bugzilla.redhat.com/show_bug.cgi?id=1724984
bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3890
gitlab.gnome.org/GNOME/evolution-ews/issues/27
Related
openvas
openvas
Fedora Update for evolution-ews FEDORA-2019-3a2cc6a0b9
2019-05-07 00:00:00
Fedora Update for evolution-data-server FEDORA-2019-3a2cc6a0b9
2019-05-07 00:00:00
prion
prion
Information disclosure
2019-08-01 14:15:00
nessus
nessus
NewStart CGSL CORE 5.05 / MAIN 5.05 : evolution-data-server Vulnerability (NS-SA-2020-0114)
2020-12-09 00:00:00
NewStart CGSL CORE 5.05 / MAIN 5.05 : evolution-ews Vulnerability (NS-SA-2020-0086)
2020-12-09 00:00:00
CentOS 8 : evolution (CESA-2019:3699)
2021-01-29 00:00:00
fedora
fedora
[SECURITY] Fedora 29 Update: evolution-data-server-3.30.5-2.fc29
2019-04-06 19:44:49
[SECURITY] Fedora 29 Update: evolution-ews-3.30.5-2.fc29
2019-04-06 19:44:49
nvd
nvd
CVE-2019-3890
2019-08-01 14:15:13
redhat
redhat
(RHSA-2019:3699) Moderate: evolution security and bug fix update
2019-11-05 20:52:06
(RHSA-2020:1080) Moderate: evolution security and bug fix update
2020-03-31 09:16:03
amazon
amazon
Medium: evolution-data-server, evolution-ews
2020-08-18 19:31:00
ubuntucve
ubuntucve
CVE-2019-3890
2019-08-01 00:00:00
osv
osv
CVE-2019-3890
2019-08-01 14:15:13
cvelist
cvelist
CVE-2019-3890
2019-08-01 13:22:55
redhatcve
redhatcve
CVE-2019-3890
2020-04-02 13:53:41
debiancve
debiancve
CVE-2019-3890
2019-08-01 14:15:13
cve
cve
CVE-2019-3890
2019-08-01 14:15:13
oraclelinux
oraclelinux
evolution security and bug fix update
2019-11-14 00:00:00
evolution security and bug fix update
2020-04-06 00:00:00
centos
centos
atk, evolution security update
2020-04-08 17:42:28