Claws Mail vCalendar plugin: credentials exposed on interface
The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.
Link | Tags |
---|---|
https://security-tracker.debian.org/tracker/CVE-2012-5527 | third party advisory |
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-5527 | third party advisory issue tracking |
http://www.openwall.com/lists/oss-security/2012/11/28/10 | third party advisory mailing list |
http://www.openwall.com/lists/oss-security/2012/11/28/8 | third party advisory mailing list |
http://www.openwall.com/lists/oss-security/2012/11/28/9 | third party advisory mailing list |