CVE-2014-5369

Enigmail 1.7.x before 1.7.2 sends emails in plaintext when encryption is enabled and only BCC recipients are specified, which allows remote attackers to obtain…

published September 8, 2014

CVSS
—
EPSS
2%
Percentile
79.9
In the wild
Unconfirmed
What it is

Enigmail 1.7.x before 1.7.2 sends emails in plaintext when encryption is enabled and only BCC recipients are specified, which allows remote attackers to obtain sensitive information by sniffing the network.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01938 · 79.9th percentile
Published
2014-09-08T14:00Z
EPSS history
Timeline
  • 08 SEP 14:00Z
    Enigmail 1.7.x before 1.7.2 sends emails in plaintext when encryption is enabled and only BCC recipients are specified, which allows remote attackers to obtain…
    cvelistv5