CVE-2019-3890 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2019-3890 Interim 1 21 2025-05-17T02:41:36Z current 2021-05-30T14:22:57Z 2025-05-17T02:41:36Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2019-3890 It was discovered evolution-ews before 3.31.3 does not check the validity of SSL certificates. An attacker could abuse this flaw to get confidential information by tricking the user into connecting to a fake server without the user noticing the difference. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Liberty Linux 7 SUSE Liberty Linux 7 LTSS SUSE Liberty Linux 8 SUSE Linux Enterprise Workstation Extension 15 SP3 SUSE Linux Enterprise Workstation Extension 15 SP4 SUSE Linux Enterprise Module for Package Hub 15 SP3 SUSE Linux Enterprise Module for Package Hub 15 SP4 SUSE Linux Enterprise Workstation Extension 15 SP3 SUSE Linux Enterprise Workstation Extension 15 SP4 SUSE Linux Enterprise Workstation Extension 15 SP3 SUSE Linux Enterprise Workstation Extension 15 SP4 atk-2.28.1-2.el7 atk-devel-2.28.1-2.el7 evolution-3.28.5-8.el7 evolution-3.28.5-9.el8 evolution-bogofilter-3.28.5-8.el7 evolution-bogofilter-3.28.5-9.el8 evolution-data-server-3.28.5-11.el8 evolution-data-server-3.28.5-4.el7 evolution-data-server-devel-3.28.5-11.el8 evolution-data-server-devel-3.28.5-4.el7 evolution-data-server-doc-3.28.5-11.el8 evolution-data-server-doc-3.28.5-4.el7 evolution-data-server-langpacks-3.28.5-11.el8 evolution-data-server-langpacks-3.28.5-4.el7 evolution-data-server-perl-3.28.5-11.el8 evolution-data-server-perl-3.28.5-4.el7 evolution-data-server-tests-3.28.5-11.el8 evolution-data-server-tests-3.28.5-4.el7 evolution-devel-3.28.5-8.el7 evolution-devel-3.28.5-9.el8 evolution-devel-docs-3.28.5-8.el7 evolution-ews evolution-ews-3.28.5-5.el7 evolution-ews-3.28.5-5.el8 evolution-ews-lang evolution-ews-langpacks-3.28.5-5.el7 evolution-ews-langpacks-3.28.5-5.el8 evolution-help-3.28.5-8.el7 evolution-help-3.28.5-9.el8 evolution-langpacks-3.28.5-8.el7 evolution-langpacks-3.28.5-9.el8 evolution-pst-3.28.5-8.el7 evolution-pst-3.28.5-9.el8 evolution-spamassassin-3.28.5-8.el7 evolution-spamassassin-3.28.5-9.el8 atk-2.28.1-2.el7 as a component of SUSE Liberty Linux 7 atk-devel-2.28.1-2.el7 as a component of SUSE Liberty Linux 7 evolution-3.28.5-8.el7 as a component of SUSE Liberty Linux 7 evolution-bogofilter-3.28.5-8.el7 as a component of SUSE Liberty Linux 7 evolution-data-server-3.28.5-4.el7 as a component of SUSE Liberty Linux 7 evolution-data-server-devel-3.28.5-4.el7 as a component of SUSE Liberty Linux 7 evolution-data-server-doc-3.28.5-4.el7 as a component of SUSE Liberty Linux 7 evolution-data-server-langpacks-3.28.5-4.el7 as a component of SUSE Liberty Linux 7 evolution-data-server-perl-3.28.5-4.el7 as a component of SUSE Liberty Linux 7 evolution-data-server-tests-3.28.5-4.el7 as a component of SUSE Liberty Linux 7 evolution-devel-3.28.5-8.el7 as a component of SUSE Liberty Linux 7 evolution-devel-docs-3.28.5-8.el7 as a component of SUSE Liberty Linux 7 evolution-ews-3.28.5-5.el7 as a component of SUSE Liberty Linux 7 evolution-ews-langpacks-3.28.5-5.el7 as a component of SUSE Liberty Linux 7 evolution-help-3.28.5-8.el7 as a component of SUSE Liberty Linux 7 evolution-langpacks-3.28.5-8.el7 as a component of SUSE Liberty Linux 7 evolution-pst-3.28.5-8.el7 as a component of SUSE Liberty Linux 7 evolution-spamassassin-3.28.5-8.el7 as a component of SUSE Liberty Linux 7 atk-2.28.1-2.el7 as a component of SUSE Liberty Linux 7 LTSS atk-devel-2.28.1-2.el7 as a component of SUSE Liberty Linux 7 LTSS evolution-3.28.5-8.el7 as a component of SUSE Liberty Linux 7 LTSS evolution-bogofilter-3.28.5-8.el7 as a component of SUSE Liberty Linux 7 LTSS evolution-data-server-3.28.5-4.el7 as a component of SUSE Liberty Linux 7 LTSS evolution-data-server-devel-3.28.5-4.el7 as a component of SUSE Liberty Linux 7 LTSS evolution-data-server-doc-3.28.5-4.el7 as a component of SUSE Liberty Linux 7 LTSS evolution-data-server-langpacks-3.28.5-4.el7 as a component of SUSE Liberty Linux 7 LTSS evolution-data-server-perl-3.28.5-4.el7 as a component of SUSE Liberty Linux 7 LTSS evolution-data-server-tests-3.28.5-4.el7 as a component of SUSE Liberty Linux 7 LTSS evolution-devel-3.28.5-8.el7 as a component of SUSE Liberty Linux 7 LTSS evolution-devel-docs-3.28.5-8.el7 as a component of SUSE Liberty Linux 7 LTSS evolution-ews-3.28.5-5.el7 as a component of SUSE Liberty Linux 7 LTSS evolution-ews-langpacks-3.28.5-5.el7 as a component of SUSE Liberty Linux 7 LTSS evolution-help-3.28.5-8.el7 as a component of SUSE Liberty Linux 7 LTSS evolution-langpacks-3.28.5-8.el7 as a component of SUSE Liberty Linux 7 LTSS evolution-pst-3.28.5-8.el7 as a component of SUSE Liberty Linux 7 LTSS evolution-spamassassin-3.28.5-8.el7 as a component of SUSE Liberty Linux 7 LTSS evolution-3.28.5-9.el8 as a component of SUSE Liberty Linux 8 evolution-bogofilter-3.28.5-9.el8 as a component of SUSE Liberty Linux 8 evolution-data-server-3.28.5-11.el8 as a component of SUSE Liberty Linux 8 evolution-data-server-devel-3.28.5-11.el8 as a component of SUSE Liberty Linux 8 evolution-data-server-doc-3.28.5-11.el8 as a component of SUSE Liberty Linux 8 evolution-data-server-langpacks-3.28.5-11.el8 as a component of SUSE Liberty Linux 8 evolution-data-server-perl-3.28.5-11.el8 as a component of SUSE Liberty Linux 8 evolution-data-server-tests-3.28.5-11.el8 as a component of SUSE Liberty Linux 8 evolution-devel-3.28.5-9.el8 as a component of SUSE Liberty Linux 8 evolution-ews-3.28.5-5.el8 as a component of SUSE Liberty Linux 8 evolution-ews-langpacks-3.28.5-5.el8 as a component of SUSE Liberty Linux 8 evolution-help-3.28.5-9.el8 as a component of SUSE Liberty Linux 8 evolution-langpacks-3.28.5-9.el8 as a component of SUSE Liberty Linux 8 evolution-pst-3.28.5-9.el8 as a component of SUSE Liberty Linux 8 evolution-spamassassin-3.28.5-9.el8 as a component of SUSE Liberty Linux 8 evolution-ews as a component of SUSE Linux Enterprise Module for Package Hub 15 SP3 evolution-ews-lang as a component of SUSE Linux Enterprise Module for Package Hub 15 SP3 evolution-ews as a component of SUSE Linux Enterprise Module for Package Hub 15 SP4 evolution-ews-lang as a component of SUSE Linux Enterprise Module for Package Hub 15 SP4 evolution-ews as a component of SUSE Linux Enterprise Workstation Extension 15 SP3 evolution-ews-lang as a component of SUSE Linux Enterprise Workstation Extension 15 SP3 evolution-ews as a component of SUSE Linux Enterprise Workstation Extension 15 SP4 evolution-ews-lang as a component of SUSE Linux Enterprise Workstation Extension 15 SP4 It was discovered evolution-ews before 3.31.3 does not check the validity of SSL certificates. An attacker could abuse this flaw to get confidential information by tricking the user into connecting to a fake server without the user noticing the difference. CVE-2019-3890 SUSE Liberty Linux 7:atk-2.28.1-2.el7 SUSE Liberty Linux 7:atk-devel-2.28.1-2.el7 SUSE Liberty Linux 7:evolution-3.28.5-8.el7 SUSE Liberty Linux 7:evolution-bogofilter-3.28.5-8.el7 SUSE Liberty Linux 7:evolution-data-server-3.28.5-4.el7 SUSE Liberty Linux 7:evolution-data-server-devel-3.28.5-4.el7 SUSE Liberty Linux 7:evolution-data-server-doc-3.28.5-4.el7 SUSE Liberty Linux 7:evolution-data-server-langpacks-3.28.5-4.el7 SUSE Liberty Linux 7:evolution-data-server-perl-3.28.5-4.el7 SUSE Liberty Linux 7:evolution-data-server-tests-3.28.5-4.el7 SUSE Liberty Linux 7:evolution-devel-3.28.5-8.el7 SUSE Liberty Linux 7:evolution-devel-docs-3.28.5-8.el7 SUSE Liberty Linux 7:evolution-ews-3.28.5-5.el7 SUSE Liberty Linux 7:evolution-ews-langpacks-3.28.5-5.el7 SUSE Liberty Linux 7:evolution-help-3.28.5-8.el7 SUSE Liberty Linux 7:evolution-langpacks-3.28.5-8.el7 SUSE Liberty Linux 7:evolution-pst-3.28.5-8.el7 SUSE Liberty Linux 7:evolution-spamassassin-3.28.5-8.el7 SUSE Liberty Linux 7 LTSS:atk-2.28.1-2.el7 SUSE Liberty Linux 7 LTSS:atk-devel-2.28.1-2.el7 SUSE Liberty Linux 7 LTSS:evolution-3.28.5-8.el7 SUSE Liberty Linux 7 LTSS:evolution-bogofilter-3.28.5-8.el7 SUSE Liberty Linux 7 LTSS:evolution-data-server-3.28.5-4.el7 SUSE Liberty Linux 7 LTSS:evolution-data-server-devel-3.28.5-4.el7 SUSE Liberty Linux 7 LTSS:evolution-data-server-doc-3.28.5-4.el7 SUSE Liberty Linux 7 LTSS:evolution-data-server-langpacks-3.28.5-4.el7 SUSE Liberty Linux 7 LTSS:evolution-data-server-perl-3.28.5-4.el7 SUSE Liberty Linux 7 LTSS:evolution-data-server-tests-3.28.5-4.el7 SUSE Liberty Linux 7 LTSS:evolution-devel-3.28.5-8.el7 SUSE Liberty Linux 7 LTSS:evolution-devel-docs-3.28.5-8.el7 SUSE Liberty Linux 7 LTSS:evolution-ews-3.28.5-5.el7 SUSE Liberty Linux 7 LTSS:evolution-ews-langpacks-3.28.5-5.el7 SUSE Liberty Linux 7 LTSS:evolution-help-3.28.5-8.el7 SUSE Liberty Linux 7 LTSS:evolution-langpacks-3.28.5-8.el7 SUSE Liberty Linux 7 LTSS:evolution-pst-3.28.5-8.el7 SUSE Liberty Linux 7 LTSS:evolution-spamassassin-3.28.5-8.el7 SUSE Liberty Linux 8:evolution-3.28.5-9.el8 SUSE Liberty Linux 8:evolution-bogofilter-3.28.5-9.el8 SUSE Liberty Linux 8:evolution-data-server-3.28.5-11.el8 SUSE Liberty Linux 8:evolution-data-server-devel-3.28.5-11.el8 SUSE Liberty Linux 8:evolution-data-server-doc-3.28.5-11.el8 SUSE Liberty Linux 8:evolution-data-server-langpacks-3.28.5-11.el8 SUSE Liberty Linux 8:evolution-data-server-perl-3.28.5-11.el8 SUSE Liberty Linux 8:evolution-data-server-tests-3.28.5-11.el8 SUSE Liberty Linux 8:evolution-devel-3.28.5-9.el8 SUSE Liberty Linux 8:evolution-ews-3.28.5-5.el8 SUSE Liberty Linux 8:evolution-ews-langpacks-3.28.5-5.el8 SUSE Liberty Linux 8:evolution-help-3.28.5-9.el8 SUSE Liberty Linux 8:evolution-langpacks-3.28.5-9.el8 SUSE Liberty Linux 8:evolution-pst-3.28.5-9.el8 SUSE Liberty Linux 8:evolution-spamassassin-3.28.5-9.el8 SUSE Linux Enterprise Module for Package Hub 15 SP3:evolution-ews SUSE Linux Enterprise Module for Package Hub 15 SP3:evolution-ews-lang SUSE Linux Enterprise Module for Package Hub 15 SP4:evolution-ews SUSE Linux Enterprise Module for Package Hub 15 SP4:evolution-ews-lang SUSE Linux Enterprise Workstation Extension 15 SP3:evolution-ews SUSE Linux Enterprise Workstation Extension 15 SP3:evolution-ews-lang SUSE Linux Enterprise Workstation Extension 15 SP4:evolution-ews SUSE Linux Enterprise Workstation Extension 15 SP4:evolution-ews-lang moderate 5.8 AV:N/AC:M/Au:N/C:P/I:P/A:N 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N