Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The Wocky module in Telepathy Gabble before 0.16.6 and 0.17.x before 0.17.4, when connecting to a "legacy Jabber server," does not properly enforce the WockyConnector:tls-required flag, which allows remote attackers to bypass TLS verification and perform a man-in-the-middle attacks.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Telepathy Gabble TLS 安全绕过漏洞
Vulnerability Description
Telepathy是一个模块化通信框架，它通过可插入式的后端协议进行实时通讯。Telepathy Gabble是其中的一个用于Jabber/XMPP的Telepathy连接管理器。 Telepathy Gabble 0.16.6之前的版本和0.17.4之前的0.17.x版本中的Wocky模块中存在安全漏洞，当连接‘传统的Jabber服务器’时，程序没有正确执行WockyConnector:tls所要求的标志。远程攻击者可利用该漏洞绕过TLS验证，并执行中间人攻击。
CVSS Information
N/A
Vulnerability Type
N/A