CVE-2013-1853

CVE-2013-1853

EPSS 0.4%

Almanah Diary 0.9.0 and 0.10.0 does not encrypt the database when closed, which allows local users to obtain sensitive information by reading the database.

Productos afectados

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →

Referencias

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=702905 http://lists.opensuse.org/opensuse-updates/2014-01/msg00080.html https://bugzilla.gnome.org/show_bug.cgi?id=695117 https://bugzilla.redhat.com/show_bug.cgi?id=920848 http://www.openwall.com/lists/oss-security/2013/03/13/1