CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 8.1. See the original NVD description below for full technical details.
CVE
CVE-2019-3890
Severity
HIGH
CVSS
8.1
EPSS
0.99%
Original NVD Description
It was discovered evolution-ews before 3.31.3 does not check the validity of SSL certificates. An attacker could abuse this flaw to get confidential information by tricking the user into connecting to a fake server without the user noticing the difference.
Related CVEs
Other vulnerabilities affecting the same vendor(s)