NVD

Id
36596  
Name
CVE-2013-0240  
Description
Gnome Online Accounts (GOA) 3.4.x, 3.6.x before 3.6.3, and 3.7.x before 3.7.5, does not properly validate SSL certificates when creating accounts such as Windows Live and Facebook accounts, which allows man-in-the-middle attackers to obtain sensitive information such as credentials by sniffing the network.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-18  
Published
2013-04-01  
Modified Date
2013-04-02  
Seq
2013-0240  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
186982 36596 CVE-2013-0240 openSUSE-SU-2013:0301  View
186983 36596 CVE-2013-0240 USN-1779-1  View
186984 36596 CVE-2013-0240 https://bugzilla.gnome.org/show_bug.cgi?id=693214  View
186985 36596 CVE-2013-0240 https://bugzilla.redhat.com/show_bug.cgi?id=894352  View
186986 36596 CVE-2013-0240 https://git.gnome.org/browse/gnome-online-accounts/commit/?h=gnome-3-6&id=ecad8142e9ac519b9fc74b96dcb5531052bbffe1  View
186987 36596 CVE-2013-0240 https://git.gnome.org/browse/gnome-online-accounts/commit/?id=bc10fdb68f75f8be84eb698ada08743b9c7c248f  View
186988 36596 CVE-2013-0240 https://git.gnome.org/browse/gnome-online-accounts/commit/?id=edde7c63326242a60a075341d3fea0be0bc4d80e  View
186989 36596 CVE-2013-0240 [gnome-announce-list] 20130304 GNOME Online Accounts 3.6.3 released  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
20544 JVNDB-2013-002119 Gnome Online Accounts における重要な情報を取得される脆弱性 Gnome Online Accounts は、Windows Live や Facebook などのアカウントを作成する際、SSL 証明書を適切に検証しないため、認証情報などの重要な情報を取得される脆弱性が存在します。 CVE-2013-0240 60182 CVE-2013-0240 36596 4.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-002119.html 2013-03-25 2013-04-03 View