Published: 01/08/2019 Updated: 09/10/2019

CVSS v2 Base Score: 5.8 | Impact Score: 4.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 8.1 | Impact Score: 5.2 | Exploitability Score: 2.8

VMScore: 516

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:N

It exists evolution-ews prior to 3.31.3 does not check the validity of SSL certificates. An attacker could abuse this flaw to get confidential information by tricking the user into connecting to a fake server without the user noticing the difference.

Vulnerable Product	Search on Vulmon	Subscribe to Product
gnome evolution-ews
redhat enterprise linux 8.0
redhat enterprise linux 7.0

Debian Bug report logs - #926712 evolution-ews: CVE-2019-3890 Package: evolution-ews; Maintainer for evolution-ews is Debian GNOME Maintainers <pkg-gnome-maintainers@listsaliothdebianorg>; Source for evolution-ews is src:evolution-ews (PTS, buildd, popcon) Reported by: Sylvain Beucler <beuc@beucnet> Date: Tue, 9 ...

Synopsis Moderate: evolution security and bug fix update Type/Severity Security Advisory: Moderate Topic An update for evolution, evolution-data-server, and evolution-ews is now available for Red Hat Enterprise Linux 8Red Hat Product Security has rated this update as having a security impact of Moderate A ...

Synopsis Moderate: evolution security and bug fix update Type/Severity Security Advisory: Moderate Topic An update for evolution, evolution-data-server, evolution-ews, and atk is now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a security impact of Modera ...

It was discovered evolution-ews before 3313 does not check the validity of SSL certificates An attacker could abuse this flaw to get confidential information by tricking the user into connecting to a fake server without the user noticing the difference (CVE-2019-3890) ...

CWE-295 https://gitlab.gnome.org/GNOME/evolution-ews/issues/27 https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3890 https://access.redhat.com/errata/RHSA-2019:3699 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=926712 https://nvd.nist.gov https://alas.aws.amazon.com/AL2/ALAS-2020-1475.html

CVE-2019-3890

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect