PT-2018-3163 · Mozilla+5 · Thunderbird+5
Hanno Boeck
·
Publicado
2018-07-03
·
Atualizado
2024-06-15
·
CVE-2018-12374
CVSS v2.0
5.0
Média
| Vetor | AV:N/AC:L/Au:N/C:P/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Thunderbird versions prior to 52.9
Description
The issue is related to a lack of protection for sensitive data in the Thunderbird email client. It can be exploited by a remote attacker to gain unauthorized access to protected information. This can happen when a user submits an embedded form by pressing the enter key within a text input field, potentially leaking plaintext of decrypted emails.
Recommendations
For versions prior to 52.9, update to version 52.9 or later to resolve the issue.
Correção
Information Disclosure
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Alt Linux
Centos
Red Hat
Suse
Thunderbird
Ubuntu