Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2024-11159

Опубликовано: 13 нояб. 2024
Источник: redhat
CVSS3: 4.3
EPSS Низкий

Описание

Using remote content in OpenPGP encrypted messages can lead to the disclosure of plaintext. This vulnerability affects Thunderbird < 128.4.3 and Thunderbird < 132.0.1.

The Mozilla Foundation Security Advisory describes this flaw as: Using remote content in OpenPGP encrypted messages can lead to the disclosure of plaintext.

Отчет

Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 6thunderbirdOut of support scope
Red Hat Enterprise Linux 7thunderbirdOut of support scope
Red Hat Enterprise Linux 9thunderbird-flatpak-containerAffected
Red Hat Enterprise Linux 8thunderbirdFixedRHSA-2024:1059102.12.2024
Red Hat Enterprise Linux 8.2 Advanced Update SupportthunderbirdFixedRHSA-2024:1070402.12.2024
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update SupportthunderbirdFixedRHSA-2024:1073303.12.2024
Red Hat Enterprise Linux 8.4 Telecommunications Update ServicethunderbirdFixedRHSA-2024:1073303.12.2024
Red Hat Enterprise Linux 8.4 Update Services for SAP SolutionsthunderbirdFixedRHSA-2024:1073303.12.2024
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update SupportthunderbirdFixedRHSA-2024:1073403.12.2024
Red Hat Enterprise Linux 8.6 Telecommunications Update ServicethunderbirdFixedRHSA-2024:1073403.12.2024

Показывать по

Дополнительная информация

Статус:

Important
Дефект:
CWE-200
https://bugzilla.redhat.com/show_bug.cgi?id=2325896thunderbird: Potential disclosure of plaintext in OpenPGP encrypted message

EPSS

Процентиль: 13%
0.00045
Низкий

4.3 Medium

CVSS3

Связанные уязвимости

CVSS3: 4.3
ubuntu
7 месяцев назад

Using remote content in OpenPGP encrypted messages can lead to the disclosure of plaintext. This vulnerability affects Thunderbird < 128.4.3 and Thunderbird < 132.0.1.

CVSS3: 4.3
nvd
7 месяцев назад

Using remote content in OpenPGP encrypted messages can lead to the disclosure of plaintext. This vulnerability affects Thunderbird < 128.4.3 and Thunderbird < 132.0.1.

CVSS3: 4.3
debian
7 месяцев назад

Using remote content in OpenPGP encrypted messages can lead to the dis ...

CVSS3: 4.3
github
7 месяцев назад

Using remote content in OpenPGP encrypted messages can lead to the disclosure of plaintext. This vulnerability affects Thunderbird < 128.4.3 and Thunderbird < 132.0.1.

CVSS3: 5.3
fstec
7 месяцев назад

Уязвимость реализации стандарта шифрования электронной почты OpenPGP почтового клиента Mozilla Thunderbird, позволяющая нарушителю раскрыть защищаемую информацию

EPSS

Процентиль: 13%
0.00045
Низкий

4.3 Medium

CVSS3