CVE-2019-3890

Published: 2019-08-01T14:15Z

Last Modified: 2024-11-21T04:42Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

It was discovered evolution-ews before 3.31.3 does not check the validity of SSL certificates. An attacker could abuse this flaw to get confidential information by tricking the user into connecting to a fake server without the user noticing the difference. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt