CVE-2016-10351

Опубликовано: 01 мая 2017

Источник: nvd

CVSS3: 5.5

CVSS2: 2.1

EPSS Низкий

Описание

Telegram Desktop 0.10.19 uses 0755 permissions for $HOME/.TelegramDesktop, which allows local users to obtain sensitive authentication information via standard filesystem operations.

Ссылки

https://github.com/telegramdesktop/tdesktop/issues/2666
Issue Tracking
Patch
Third Party Advisory
https://github.com/telegramdesktop/tdesktop/pull/3842/commits/388703b9ca1912a5438e37f9dd54c35805f2c594
https://github.com/telegramdesktop/tdesktop/issues/2666
Issue Tracking
Patch
Third Party Advisory
https://github.com/telegramdesktop/tdesktop/pull/3842/commits/388703b9ca1912a5438e37f9dd54c35805f2c594

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:telegram_desktop:telegram_desktop:0.10.19:*:*:*:*:*:*:*

EPSS

Процентиль: 31%

0.00369

Низкий

5.5 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-200

Связанные уязвимости

CVE-2016-10351

CVSS3: 5.5

ubuntu

больше 9 лет назад

Telegram Desktop 0.10.19 uses 0755 permissions for $HOME/.TelegramDesktop, which allows local users to obtain sensitive authentication information via standard filesystem operations.

CVE-2016-10351

CVSS3: 5.5

debian

больше 9 лет назад

Telegram Desktop 0.10.19 uses 0755 permissions for $HOME/.TelegramDesk ...

GHSA-5rqw-447c-m8hm

CVSS3: 5.5

github

больше 4 лет назад

Telegram Desktop 0.10.19 uses 0755 permissions for $HOME/.TelegramDesktop, which allows local users to obtain sensitive authentication information via standard filesystem operations.

ALT-PU-2017-2551

CVSS3: 5.5

altlinux

около 9 лет назад

ALT-PU-2017-2551: package `telegram-desktop` update to version 1.1.23-alt3

EPSS

Процентиль: 31%

0.00369

Низкий

5.5 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-200