CVE-2013-4166

Katalog CVE

CVSS 7.5 · High EPSS 1,9%

Kerentanan Exposure of Sensitive Information to an Unauthorized Actor pada gnome evolution, gnome evolution data server +3 lainnya. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

The gpg_ctx_add_recipient function in camel/camel-gpg-context.c in GNOME Evolution 3.8.4 and earlier and Evolution Data Server 3.9.5 and earlier does not properly select the GPG key to use for email encryption, which might cause the email to be encrypted with the wrong key and allow remote attackers to obtain sensitive information.

Rincian

Terbit di NVD

6 Februari 2020

Terakhir diubah

16 Juni 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

EPSS (30 hari)

1,9% peluang dieksploitasi; lebih tinggi dari 79,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.gnome.org/browse/evolution-data-server/commit/?h=gnome-3-8&id=f7059bb37dcce485d36d769142ec9515708d... patch · advisory vendor
• https://git.gnome.org/browse/evolution-data-server/commit/?id=5d8b92c622f6927b253762ff9310479dd3ac627d patch · advisory vendor
• http://rhn.redhat.com/errata/RHSA-2013-1540.html advisory pihak ketiga
• http://seclists.org/oss-sec/2013/q3/191 mailing list · advisory pihak ketiga
• https://bugzilla.redhat.com/show_bug.cgi?id=973728 issue tracking · advisory pihak ketiga