CVE-2016-1000033

Shotwell version 0.22.0 (and possibly other versions) is vulnerable to a TLS/SSL certification validation flaw resulting in a potential for man in the middle attacks.

Score

CVSS 3.1 3.7 Low

Status

Modified - cve@mitre.org

Published

2016-10-25

Last modified

2024-08-06

Weaknesses

CWE-295

Affected products

• Shotwell (Gnome)
• Enterprise Linux (Redhat)

References

• https://bugzilla.gnome.org/show_bug.cgi?id=754488