CVE-2015-7298

ownCloud Desktop Client before 2.0.1, when compiled with a Qt release after 5.3.x, does not call QNetworkReply::ignoreSslErrors with the list of errors to be…

published October 26, 2015

CVSS
—
EPSS
1%
Percentile
51.3
In the wild
Unconfirmed
What it is

ownCloud Desktop Client before 2.0.1, when compiled with a Qt release after 5.3.x, does not call QNetworkReply::ignoreSslErrors with the list of errors to be ignored, which makes it easier for remote attackers to conduct man-in-the-middle (MITM) attacks by leveraging a server using a self-signed certificate. NOTE: this vulnerability exists because of a partial CVE-2015-4456 regression.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00668 · 51.3th percentile
Published
2015-10-26T14:00Z
EPSS history
Timeline
  • 26 OCT 14:00Z
    ownCloud Desktop Client before 2.0.1, when compiled with a Qt release after 5.3.x, does not call QNetworkReply::ignoreSslErrors with the list of errors to be…
    cvelistv5