CVE-2016-9107

Published: Jan 13, 2017Modified: May 13, 2026

7.5

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

The OTR plugin for Gajim sends information in cleartext when using XHTML, which allows remote attackers to obtain sensitive information via unspecified vectors.

Affected (1)

Products: Otr: Gajim Otr

Otr

1 product

Gajim Otr

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Otr Gajim Otr	All versions

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (10)

http://www.openwall.com/lists/oss-security/2016/10/30/11

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2016/10/30/2

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://www.securityfocus.com/bid/94099

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

https://dev.gajim.org/gajim/gajim-plugins/issues/145

Source: cve@mitre.org

Issue TrackingPatch

https://trac-plugins.gajim.org/changeset/c7c2e519ed63377bc943dd01c4661b0fe49321ae

Source: cve@mitre.org

Permissions Required

http://www.openwall.com/lists/oss-security/2016/10/30/11