← Back

CVE-2018-14023

nvd nist
Published: Aug 20, 2018Modified: Nov 21, 2024

JSON object

Loading...
4.0
Vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Exploitability: 2.5 / Impact: 1.4
Source: NVD

Description

Open Whisper Signal (aka Signal-Desktop) before 1.15.0-beta.10 allows information leakage.

Affected (10)

Signal
1 product
Signal Desktop
Configuration A
10 vulnerable
Vulnerable SoftwareAffected Versions
Signal
Signal Desktop
version < 1.15.0
Signal Desktop
Version 1.15.0 beta1
Signal Desktop
Version 1.15.0 beta2
Signal Desktop
Version 1.15.0 beta3
Signal Desktop
Version 1.15.0 beta4
Signal Desktop
Version 1.15.0 beta5
Signal Desktop
Version 1.15.0 beta6
Signal Desktop
Version 1.15.0 beta7
Signal Desktop
Version 1.15.0 beta8
Signal Desktop
Version 1.15.0 beta9

Related CWEs

CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (4)

Source: cve@mitre.org
ExploitThird Party Advisory
Source: cve@mitre.org
ExploitThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitThird Party Advisory

Timeline

No history available yet.