Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7w32-mxrp-49jg

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

KDE kmail before 5.5.2 and messagelib before 5.5.2, as distributed in KDE Applications before 17.04.2, do not ensure that a plugin's sign/encrypt action occurs during use of the Send Later feature, which allows remote attackers to obtain sensitive information by sniffing the network.

KDE kmail before 5.5.2 and messagelib before 5.5.2, as distributed in KDE Applications before 17.04.2, do not ensure that a plugin's sign/encrypt action occurs during use of the Send Later feature, which allows remote attackers to obtain sensitive information by sniffing the network.

EPSS

Процентиль: 49%
0.00263
Низкий

7.5 High

CVSS3

Дефекты

CWE-311

Связанные уязвимости

CVSS3: 7.5
ubuntu
больше 8 лет назад

KDE kmail before 5.5.2 and messagelib before 5.5.2, as distributed in KDE Applications before 17.04.2, do not ensure that a plugin's sign/encrypt action occurs during use of the Send Later feature, which allows remote attackers to obtain sensitive information by sniffing the network.

CVSS3: 5.4
redhat
больше 8 лет назад

KDE kmail before 5.5.2 and messagelib before 5.5.2, as distributed in KDE Applications before 17.04.2, do not ensure that a plugin's sign/encrypt action occurs during use of the Send Later feature, which allows remote attackers to obtain sensitive information by sniffing the network.

CVSS3: 7.5
nvd
больше 8 лет назад

KDE kmail before 5.5.2 and messagelib before 5.5.2, as distributed in KDE Applications before 17.04.2, do not ensure that a plugin's sign/encrypt action occurs during use of the Send Later feature, which allows remote attackers to obtain sensitive information by sniffing the network.

CVSS3: 7.5
debian
больше 8 лет назад

KDE kmail before 5.5.2 and messagelib before 5.5.2, as distributed in ...

suse-cvrf
больше 8 лет назад

Security update for kdepim4

EPSS

Процентиль: 49%
0.00263
Низкий

7.5 High

CVSS3

Дефекты

CWE-311