Vulnerability in Yorba Geary
CVE-2014-5444
Geary before 0.6.3 does not present the user with a warning when a TLS certificate error is detected, which makes it easier for remote attackers to conduct man-in-the-middle attacks via a crafted certificate.
Vulnerability class: POODLE (CVE-2014-3566)
EPSS: 0.011 (62.0th percentile) — read the EPSS interpretation.
Affected products
- Yorba Geary
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_CONFIRM, Patch)
- cve@mitre.org (vendor-advisory, x_refsource_SUSE)
- cve@mitre.org (x_refsource_CONFIRM)