Security Advisory

CVE-2013-0240

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2013-03-28 17:00:00
Last updated 2024-08-06 14:18:09
Assigner redhat
CVSS score not scored
State PUBLISHED

Description

Gnome Online Accounts (GOA) 3.4.x, 3.6.x before 3.6.3, and 3.7.x before 3.7.5, does not properly validate SSL certificates when creating accounts such as Windows Live and Facebook accounts, which allows man-in-the-middle attackers to obtain sensitive information such as credentials by sniffing the network.