Description (CNA)
WebCore/platform/network/soup/SocketStreamHandleImplSoup.cpp in the libsoup network backend of WebKit, as used in WebKitGTK+ versions 2.20.0 and 2.20.1, failed to perform TLS certificate verification for WebSocket connections.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://security.gentoo.org/glsa/201808-04
- https://trac.webkit.org/changeset/230886/webkit
- https://bugs.webkit.org/show_bug.cgi?id=184804
ADP enrichment
No English description supplied.