Unsecured Twitter Connection in Libsocialweb by GNOME
CVE-2011-4129

Currently unrated

Key Information:

Vendor

Gnome
Status
Libsocialweb
Vendor
CVE Published:
22 October 2012

What is CVE-2011-4129?

Libsocialweb versions before 0.25.20 contain a vulnerability where components (services/twitter/twitter-contact-view.c and services/twitter/twitter-item-view.c) automatically establish a connection to Twitter without user credentials. This behavior can leave users vulnerable to man-in-the-middle (MITM) attacks, enabling remote attackers to access sensitive information without the user’s consent. Proper authentication mechanisms and secure connection practices are crucial to mitigate such risks.

References

https://bugzilla.redhat.com/show_bug.cgi?id=752022
x_refsource_MISC
http://git.gnome.org/browse/libsocialweb/commit/?id=0086b...
x_refsource_CONFIRM
http://git.gnome.org/browse/libsocialweb/commit/?id=8982c...
x_refsource_CONFIRM

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.