USN-9088-1: TigerVNC vulnerability

It was discovered that the TigerVNC viewer stored TLS certificate exceptions as trusted certificate authorities. A remote attacker could possibly use this issue to impersonate any VNC server after a user had added a certificate exception for the attacker's server.

Quelle: Originalartikel öffnen