Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

CVE-2021-39360

Related Vulnerabilities: CVE-2021-39360  

In GNOME libzapojit through 0.0.3, zpj-skydrive.c does not enable TLS certificate verification on the SoupSessionSync objects it creates, leaving users vulnerable to network MITM attacks. NOTE: this is similar to CVE-2016-20011.

Source

Description

The MITRE CVE dictionary describes this issue as:

In GNOME libzapojit through 0.0.3, zpj-skydrive.c does not enable TLS certificate verification on the SoupSessionSync objects it creates, leaving users vulnerable to network MITM attacks. NOTE: this is similar to CVE-2016-20011.

Additional Information

  • Bugzilla 1997152: CVE-2021-39360 libzapojit: missing TLS certificate verification
  • CWE-295: Improper Certificate Validation
  • FAQ: Frequently asked questions about CVE-2021-39360

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook

Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started