| Package | Affected versions | Patched versions |
|---|---|---|
| evolution-ews | < 3.31.3 | 3.31.3 |
It was discovered evolution-ews before 3.31.3 does not check the validity of SSL certificates. An attacker could abuse this flaw to get confidential information by tricking the user into connecting to a fake server without the user noticing the difference.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free