Debian Evolution-Ews vulnerabilities

1 known vulnerability affecting debian/evolution-ews.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1

Vulnerabilities

Page 1 of 1

CVE-2019-3890HIGHCVSS 8.1fixed in evolution-ews 3.30.5-1.1 (bookworm)2019

CVE-2019-3890 [HIGH] CVE-2019-3890: evolution-ews - It was discovered evolution-ews before 3.31.3 does not check the validity of SSL... It was discovered evolution-ews before 3.31.3 does not check the validity of SSL certificates. An attacker could abuse this flaw to get confidential information by tricking the user into connecting to a fake server without the user noticing the difference. Scope: local bookworm: resolved (fixed in 3.30.5-1.1) bullseye: resolved (fixed in 3.30.5-1.1) forky: resol