PT-2014-2507 · Unknown · Almanah Diary

Publicado 2014-01-24 · Atualizado 2024-06-15 · CVE-2013-1853

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Almanah Diary versions 0.9.0 through 0.10.0

Description The issue allows local users to obtain sensitive information by reading the database when it is not encrypted after being closed.

Recommendations For versions 0.9.0 through 0.10.0, consider encrypting the database manually after closing the application to protect sensitive information.

Correção

Enumeração de Fraquezas

CWE-310

Identificadores relacionados

CVE-2013-1853

OPENSUSE-SU-2024:10375-1

Produtos afetados

Almanah Diary

Referências · 11

• https://suse.com/security/cve/CVE-2013-1853 · Nota
• https://bugzilla.redhat.com/show_bug.cgi?id=920848 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2013-1853 · Nota de Segurança
• http://lists.opensuse.org/opensuse-updates/2014-01/msg00080.html · Aviso do Fabricante
• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=702905 · Nota
• https://osv.dev/vulnerability/openSUSE-SU-2024:10375-1 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2013-1853 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2013-1853 · Aviso do Fabricante
• https://bugzilla.gnome.org/show_bug.cgi?id=695117 · Nota
• http://openwall.com/lists/oss-security/2013/03/13/1 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2013-1853 · Aviso do Fabricante