Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Gnome Online Accounts (GOA) 3.4.x, 3.6.x before 3.6.3, and 3.7.x before 3.7.5, does not properly validate SSL certificates when creating accounts such as Windows Live and Facebook accounts, which allows man-in-the-middle attackers to obtain sensitive information such as credentials by sniffing the network.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
GNOME Online Accounts SSL证书验证安全绕过漏洞
Vulnerability Description
GNOME是Helix Code公司开发的用于Unix/Linux的桌面环境，它含有一个组件 updater，自动下载其他组件的新版本并安装之。 Gnome Online Accounts (GOA) 3.4.x，3.6.3之前的3.6.x版本和3.7.5之前的3.7.x版本中存在漏洞，该漏洞源于创建账户（如Windows Live和Facebook账户）时，程序没有正确验证SSL证书。通过嗅探网络，中间人攻击者利用该漏洞获得敏感信息如证书。
CVSS Information
N/A
Vulnerability Type
N/A