PT-2018-3745 · Mozilla+5 · Thunderbird+5

Christian Dresen

+7

·

Publicado

2018-05-18

·

Atualizado

2024-06-15

·

CVE-2018-5185

CVSS v2.0

7.8

Alta

VetorAV:N/AC:L/Au:N/C:C/I:N/A:N
Name of the Vulnerable Software and Affected Versions Thunderbird ESR versions prior to 52.8 Thunderbird versions prior to 52.8
Description The issue is related to the handling of encrypted emails in Thunderbird, where plaintext of decrypted emails can leak when a user submits an embedded form. This is due to a lack of encryption measures for protected data. Exploitation of this issue may allow a remote attacker to gain unauthorized access to protected information.
Recommendations For Thunderbird ESR versions prior to 52.8, update to version 52.8 or later to resolve the issue. For Thunderbird versions prior to 52.8, update to version 52.8 or later to resolve the issue.

Correção

Missing Encryption of Sensitive Data

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-311

Identificadores relacionados

ALT-PU-2018-1753
BDU:2021-04141
CESA-2018_1725
CESA-2018_1726
CVE-2018-5185
DLA-1382-1
DSA-4209-1
MGASA-2018-0261
OPENSUSE-SU-2018_1361-1
OPENSUSE-SU-2024:10601-1
RHSA-2018:1725
RHSA-2018:1726
RHSA-2018_1725
RHSA-2018_1726
USN-3660-1

Produtos afetados

Alt Linux
Centos
Red Hat
Suse
Thunderbird
Ubuntu