CVE-2012-1177
libgdata before 0.10.2 and 0.11.x before 0.11.1 does not validate SSL certificates, which allows...
CVE-2012-1177 is a medium vulnerability (CVSS 5.1) in Gnome Libgdata, published May 28, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.90%, the 80th percentile. Fixed in libgdata 0.10.2-1.
- Severity
- 5.1 MediumCVSS 2.0, NVD
- Exploit chance
- 1.90%EPSS, 80th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
0.10.2-1libgdata +2 more
Description
libgdata before 0.10.2 and 0.11.x before 0.11.1 does not validate SSL certificates, which allows remote attackers to obtain user names and passwords via a man-in-the-middle (MITM) attack with a spoofed certificate.
Exploit likelihood
Affected products
Affected packages
What each source reports
NVD Score used
libgdata before 0.10.2 and 0.11.x before 0.11.1 does not validate SSL certificates, which allows remote attackers to obtain user names and passwords via a man-in-the-middle (MITM) attack with a spoofed certificate.
- Record
CVE-2012-1177- CVSS 2.0
- 5.1 Medium
AV:N/AC:H/Au:N/C:P/I:P/A:P - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE ListNo score
libgdata before 0.10.2 and 0.11.x before 0.11.1 does not validate SSL certificates, which allows remote attackers to obtain user names and passwords via a man-in-the-middle (MITM) attack with a spoofed certificate.
- Record
CVE-2012-1177- Updated
- 2026-11-02
EUVDEUVD-2012-1206No score
libgdata before 0.10.2 and 0.11.x before 0.11.1 does not validate SSL certificates, which allows remote attackers to obtain user names and passwords via a man-in-the-middle (MITM) attack with a spoofed certificate.
- Record
EUVD-2012-1206- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-fhp4-5rwr-h9r6No score
libgdata before 0.10.2 and 0.11.x before 0.11.1 does not validate SSL certificates, which allows...
libgdata before 0.10.2 and 0.11.x before 0.11.1 does not validate SSL certificates, which allows remote attackers to obtain user names and passwords via a man-in-the-middle (MITM) attack with a spoofed certificate.
- Record
GHSA-fhp4-5rwr-h9r6- Weakness
- CWE-20
- Updated
- 2026-11-02
OSVNo score
libgdata before 0.10.2 and 0.11.x before 0.11.1 does not validate SSL certificates, which allows remote attackers to obtain user names and passwords via a man-in-the-middle (MITM) attack with a spoofed certificate.
- Record
CVE-2012-1177- Updated
- 2026-11-02
OSVDEBIAN-CVE-2012-1177No score
libgdata before 0.10.2 and 0.11.x before 0.11.1 does not validate SSL certificates, which allows remote attackers to obtain user names and passwords via a man-in-the-middle (MITM) attack with a spoofed certificate.
- Record
DEBIAN-CVE-2012-1177- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
git.gnome.org/browse/libgdata/commit?h=libgdata-0-10&id=8eff8fa9138859e03e58c2aa76600ab63eb5c29c
bugzilla.novell.com/show_bug.cgi?id=752088
openwall.com/lists/oss-security/2012/03/14/8
debian.org/security/2012/dsa-2482
mandriva.com/security/advisories?name=MDVSA-2012:111
Show 9 moreShow less
bugs.launchpad.net/ubuntu/+source/libgdata/+bug/938812
bugzilla.gnome.org/show_bug.cgi?id=671535
secunia.com/advisories/50432
ubuntu.com/usn/USN-1547-1
nvd.nist.gov/vuln/detail/CVE-2012-1177
github.com/advisories/GHSA-fhp4-5rwr-h9r6
security-tracker.debian.org/tracker/CVE-2012-1177