Back to search
CVE-2017-9604
Published: Jun 13, 2017
Modified: Sep 17, 2024
PUBLISHED
Description
KDE kmail before 5.5.2 and messagelib before 5.5.2, as distributed in KDE Applications before 17.04.2, do not ensure that a plugin's sign/encrypt action occurs during use of the Send Later feature, which allows remote attackers to obtain sensitive information by sniffing the network.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
https://commits.kde.org/messagelib/c54706e990bbd6498e7b1597ec7900bc809e8197
x_refsource_CONFIRM
https://commits.kde.org/kmail/78c5552be2f00a4ac25bd77ca39386522fca70a8
x_refsource_CONFIRM
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now