CVE-2020-12637 - CVE House
Back to Database
Status published Critical CVE-2020-12637

Zulip Desktop before 5.2.0 has Missing SSL Certificate Validation because...

Vulnerability Description

Zulip Desktop before 5.2.0 has Missing SSL Certificate Validation because all validation was inadvertently disabled during an attempt to recognize the ignoreCerts option.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-12637

Credits & Attribution

No credits recorded in the NVD database.

References

More from zulipchat

View All →
CVE-2020-9443
Zulip Desktop before 4.0.3 loaded untrusted content in an Electron...
Medium 6.1
CVE-2020-24582
Zulip Desktop before 5.4.3 allows XSS because string escaping is...
Medium 6.1

Affected Vendor

Affected Software

zulip desktop
Vulnerable Versions:
0.5.10

Timeline

Official Publish: May 9th, 2020
Last Modified: August 4th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.