Skip to content
Unrated

In GNOME libgda through 6.0.0, gda-web-provider.c does not enable TLS certificate verification on the SoupSessionSync objects it creates, leaving user...

CVE-2021-39359 First seen on SecPulse

Fix status by distribution

Fixed packages published by each distribution for this CVE

Original description The description as published by the source.

In GNOME libgda through 6.0.0, gda-web-provider.c does not enable TLS certificate verification on the SoupSessionSync objects it creates, leaving users vulnerable to network MITM attacks. NOTE: this is similar to CVE-2016-20011.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details