TigerVNC vulnerability
It was discovered that the TigerVNC viewer stored TLS certificate exceptions as trusted certificate authorities. A remote attacker could possibly use this issue to impersonate any VNC server after a user had added a certificate exception for the attacker's server.
Read at Ubuntu Security Notices
- Vendor
- Canonical, RealVNC / TightVNC
- Product
- VNC
- Exposure class
- Remote access
Why it ranks 41 (Notable)
- Exposed product class: remote access
- Widely deployed vendor product (Canonical)
- Vendor security advisory
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- Ubuntu Security Notices (ubuntu.com)