Auth bypass in GNOME Libsoup

CVE-2012-2132

libsoup 2.32.2 and earlier does not validate certificates or clear the trust flag when the ssl-ca-file does not exist, which allows remote attackers to bypass authentication by connecting with a SSL connection.

Vulnerability class: Broken Authentication

EPSS: 0.016 (72.6th percentile) — read the EPSS interpretation.