CVE-2013-0240

CVE-2013-0240 describes a vulnerability in Gnome Online Accounts (GOA) versions 3.4.x, 3.6.x before 3.6.3, and 3.7.x before 3.7.5, affecting Canonical Ubuntu Linux and Gnome Online Accounts. The flaw stems from improper SSL certificate validation when setting up accounts like Windows Live and Facebook. This allows a man-in-the-middle attacker to intercept sensitive information, including user credentials, by sniffing network traffic. The vulnerability has a CVSS score of 4.3 (Medium), indicating a network-based attack with medium complexity, requiring no authentication, and potentially leading to a partial compromise of confidentiality. Its EPSS score is very low, and the FAUCET Risk Score is 11/100, suggesting a low overall risk. There is no evidence of active exploitation, and no public exploit code is available via Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage are also absent, indicating a lack of widespread attention or exploitation.