NVD

Id
33060  
Name
CVE-2014-5369  
Description
Enigmail 1.7.x before 1.7.2 sends emails in plaintext when encryption is enabled and only BCC recipients are specified, which allows remote attackers to obtain sensitive information by sniffing the network.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2014-09-08  
Modified Date
2016-12-21  
Seq
2014-5369  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
173462 33060 CVE-2014-5369 openSUSE-SU-2014:1086  View
173463 33060 CVE-2014-5369 openSUSE-SU-2014:1096  View
173464 33060 CVE-2014-5369 http://sourceforge.net/p/enigmail/bugs/294/  View
173465 33060 CVE-2014-5369 http://sourceforge.net/p/enigmail/forum/support/thread/3e7268a4/  View
173466 33060 CVE-2014-5369 [oss-security] 20140818 Enigmail warning  View
173467 33060 CVE-2014-5369 [oss-security] 20140821 Re: Enigmail warning  View
173468 33060 CVE-2014-5369 https://advisories.mageia.org/MGASA-2014-0421.html  View
173469 33060 CVE-2014-5369 GLSA-201504-01  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
15198 JVNDB-2014-004073 Enigmail における重要な情報を取得される脆弱性 Enigmail は、暗号化が有効かつ BCC 受信者が一人だけ指定されている場合、平文で電子メールを送信するため、重要な情報を取得される脆弱性が存在します。 CVE-2014-5369 72658 CVE-2014-5369 33060 4.3 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-004073.html 2014-08-29 2014-12-02 View