CVEvulnerability
CVE-2014-5444
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-09-30
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-310
Description
Geary before 0.6.3 does not present the user with a warning when a TLS certificate error is detected, which makes it easier for remote attackers to conduct man-in-the-middle attacks via a crafted certificate.
Affected configurations
• yorba geary (<= 0.5.0)
Related
Weakness · not in database (1)
References
- http://lists.opensuse.org/opensuse-updates/2014-09/msg00035.html lists.opensuse.org
- https://bugzilla.gnome.org/show_bug.cgi?id=713247 bugzilla.gnome.org
- https://git.gnome.org/browse/geary/commit/?h=geary-0.6&id=55f06a7bdcedb7efde6a516bde626ea28793ca7e Patch
- http://lists.opensuse.org/opensuse-updates/2014-09/msg00035.html lists.opensuse.org
- https://bugzilla.gnome.org/show_bug.cgi?id=713247 bugzilla.gnome.org
- https://git.gnome.org/browse/geary/commit/?h=geary-0.6&id=55f06a7bdcedb7efde6a516bde626ea28793ca7e Patch