Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-8gx2-7v6x-wp94

Опубликовано: 22 апр. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.3

Описание

evolution-data-server3 3.0.3 through 3.2.1 used insecure (non-SSL) connection when attempting to store sent email messages into the Sent folder, when the Sent folder was located on the remote server. An attacker could use this flaw to obtain login credentials of the victim.

evolution-data-server3 3.0.3 through 3.2.1 used insecure (non-SSL) connection when attempting to store sent email messages into the Sent folder, when the Sent folder was located on the remote server. An attacker could use this flaw to obtain login credentials of the victim.

EPSS

Процентиль: 44%
0.00211
Низкий

7.3 High

CVSS3

Дефекты

CWE-311

Связанные уязвимости

CVSS3: 7.3
ubuntu
около 6 лет назад

evolution-data-server3 3.0.3 through 3.2.1 used insecure (non-SSL) connection when attempting to store sent email messages into the Sent folder, when the Sent folder was located on the remote server. An attacker could use this flaw to obtain login credentials of the victim.

redhat
почти 15 лет назад

evolution-data-server3 3.0.3 through 3.2.1 used insecure (non-SSL) connection when attempting to store sent email messages into the Sent folder, when the Sent folder was located on the remote server. An attacker could use this flaw to obtain login credentials of the victim.

CVSS3: 7.3
nvd
около 6 лет назад

evolution-data-server3 3.0.3 through 3.2.1 used insecure (non-SSL) connection when attempting to store sent email messages into the Sent folder, when the Sent folder was located on the remote server. An attacker could use this flaw to obtain login credentials of the victim.

CVSS3: 7.3
debian
около 6 лет назад

evolution-data-server3 3.0.3 through 3.2.1 used insecure (non-SSL) con ...

EPSS

Процентиль: 44%
0.00211
Низкий

7.3 High

CVSS3

Дефекты

CWE-311