VULNERABILITY INTELLIGENCE

CVE-2021-39359

CVSS score5.9 MEDIUM

EPSS probability1.10%

CISA KEVNot currently listed

Published2021-08-22

Last modified2026-06-17

Description

In GNOME libgda through 6.0.0, gda-web-provider.c does not enable TLS certificate verification on the SoupSessionSync objects it creates, leaving users vulnerable to network MITM attacks. NOTE: this is similar to CVE-2016-20011.