CVE-2018-17613

Опубликовано: 28 сент. 2018

Источник: nvd

CVSS3: 9.8

CVSS2: 5

EPSS Низкий

Описание

Telegram Desktop (aka tdesktop) 1.3.16 alpha, when "Use proxy" is enabled, sends credentials and application data in cleartext over the SOCKS5 protocol.

Ссылки

https://seclists.org/oss-sec/2018/q3/280
Mailing List
Third Party Advisory
https://www.inputzero.io/2018/09/telegram-share-password-in-cleartext.html
Third Party Advisory
https://seclists.org/oss-sec/2018/q3/280
Mailing List
Third Party Advisory
https://www.inputzero.io/2018/09/telegram-share-password-in-cleartext.html
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:telegram:telegram_desktop:1.3.16:alpha:*:*:*:*:*:*

EPSS

Процентиль: 53%

0.00305

Низкий

9.8 Critical

CVSS3

5 Medium

CVSS2

Дефекты

CWE-522

Связанные уязвимости

CVE-2018-17613

CVSS3: 9.8

ubuntu

больше 7 лет назад

Telegram Desktop (aka tdesktop) 1.3.16 alpha, when "Use proxy" is enabled, sends credentials and application data in cleartext over the SOCKS5 protocol.

CVE-2018-17613

CVSS3: 9.8

debian

больше 7 лет назад

Telegram Desktop (aka tdesktop) 1.3.16 alpha, when "Use proxy" is enab ...

GHSA-f948-97vm-63xw

CVSS3: 9.8

github

больше 3 лет назад

Telegram Desktop (aka tdesktop) 1.3.16 alpha, when "Use proxy" is enabled, sends credentials and application data in cleartext over the SOCKS5 protocol.

EPSS

Процентиль: 53%

0.00305

Низкий

9.8 Critical

CVSS3

5 Medium

CVSS2

Дефекты

CWE-522