Errands before 46.2.10 does not verify TLS certificates for CalDAV servers.
Weakness
The product does not validate, or incorrectly validates, a certificate.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Errands | Mrvladus | * | 46.2.10 (excluding) |
| Errands | Ubuntu | plucky | * |
| Errands | Ubuntu | upstream | * |
Potential Mitigations
Related Attack Patterns
References
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1123738
- https://github.com/mrvladus/Errands/commit/04e567b432083fc798ea2249363ea6c83ff01099
- https://github.com/mrvladus/Errands/compare/46.2.9...46.2.10
- https://github.com/mrvladus/Errands/issues/401
- https://github.com/mrvladus/Errands/releases/tag/46.2.10