CVE-2016-9107

Опубликовано: 13 янв. 2017

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

The OTR plugin for Gajim sends information in cleartext when using XHTML, which allows remote attackers to obtain sensitive information via unspecified vectors.

Ссылки

http://www.openwall.com/lists/oss-security/2016/10/30/11
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/10/30/2
Mailing List
Third Party Advisory
http://www.securityfocus.com/bid/94099
Third Party Advisory
VDB Entry
https://dev.gajim.org/gajim/gajim-plugins/issues/145
Issue Tracking
Patch
https://trac-plugins.gajim.org/changeset/c7c2e519ed63377bc943dd01c4661b0fe49321ae
Permissions Required
http://www.openwall.com/lists/oss-security/2016/10/30/11
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/10/30/2
Mailing List
Third Party Advisory
http://www.securityfocus.com/bid/94099
Third Party Advisory
VDB Entry
https://dev.gajim.org/gajim/gajim-plugins/issues/145
Issue Tracking
Patch
https://trac-plugins.gajim.org/changeset/c7c2e519ed63377bc943dd01c4661b0fe49321ae
Permissions Required

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:otr:gajim-otr:-:*:*:*:*:*:*:*

EPSS

Процентиль: 79%

0.01261

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-200

Связанные уязвимости

CVE-2016-9107

CVSS3: 7.5

debian

больше 8 лет назад

The OTR plugin for Gajim sends information in cleartext when using XHT ...

GHSA-28qp-98vv-5xqx

CVSS3: 7.5

github

больше 3 лет назад

The OTR plugin for Gajim sends information in cleartext when using XHTML, which allows remote attackers to obtain sensitive information via unspecified vectors.

EPSS

Процентиль: 79%

0.01261

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-200