CVE-2020-26117

In rfb/CSecurityTLS.cxx and rfb/CSecurityTLS.java in TigerVNC before 1.11.0, viewers mishandle TLS certificate exceptions

published September 27, 2020

CVSS
—
EPSS
3%
Percentile
87.5
In the wild
Unconfirmed
What it is

In rfb/CSecurityTLS.cxx and rfb/CSecurityTLS.java in TigerVNC before 1.11.0, viewers mishandle TLS certificate exceptions. They store the certificates as authorities, meaning that the owner of a certificate could impersonate any server after a client had added an exception.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03060 · 87.5th percentile
Published
2020-09-27T03:30Z
EPSS history
Timeline
  • 27 SEP 03:30Z
    In rfb/CSecurityTLS.cxx and rfb/CSecurityTLS.java in TigerVNC before 1.11.0, viewers mishandle TLS certificate exceptions
    cvelistv5