CVE-2014-5369 in Enigmail
摘要 (英语)
Enigmail 1.7.x before 1.7.2 sends emails in plaintext when encryption is enabled and only BCC recipients are specified, which allows remote attackers to obtain sensitive information by sniffing the network.
预定
2014-08-20
披露
2014-09-08
条目
VulDB provides additional information and datapoints for this CVE:
| 标识符 | 漏洞 | CWE | 可利用 | 对策 | CVE |
|---|---|---|---|---|---|
| 67521 | Enigmail 弱加密 | 310 | 未经证实 | 官方修复 | CVE-2014-5369 |