PT-2014-2507 · Unknown · Almanah Diary

Published 2014-01-24 · Updated 2024-06-15 · CVE-2013-1853

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Almanah Diary versions 0.9.0 through 0.10.0

Description The issue allows local users to obtain sensitive information by reading the database when it is not encrypted after being closed.

Recommendations For versions 0.9.0 through 0.10.0, consider encrypting the database manually after closing the application to protect sensitive information.

Fix

Weakness Enumeration

CWE-310

Related Identifiers

CVE-2013-1853

OPENSUSE-SU-2024:10375-1

Affected Products

Almanah Diary

References · 11

• https://nvd.nist.gov/vuln/detail/CVE-2013-1853 · Security Note
• http://lists.opensuse.org/opensuse-updates/2014-01/msg00080.html · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10375-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2013-1853 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2013-1853 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2013-1853 · Vendor Advisory
• https://suse.com/security/cve/CVE-2013-1853 · Note
• https://bugzilla.redhat.com/show_bug.cgi?id=920848 · Note
• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=702905 · Note
• https://bugzilla.gnome.org/show_bug.cgi?id=695117 · Note
• http://openwall.com/lists/oss-security/2013/03/13/1 · Note