Security Advisory

CVE-2019-3890

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2019-08-01 13:22:55
Last updated 2024-08-04 19:19:18
Assigner redhat
State PUBLISHED

Description

It was discovered evolution-ews before 3.31.3 does not check the validity of SSL certificates. An attacker could abuse this flaw to get confidential information by tricking the user into connecting to a fake server without the user noticing the difference.