CVE-2019-19022

iTerm2 through 3.3.6 has potentially insufficient documentation about the presence of search history in com.googlecode.iterm2.plist, which might allow remote…

published November 17, 2019

CVSS
—
EPSS
1%
Percentile
72.6
In the wild
Unconfirmed
What it is

iTerm2 through 3.3.6 has potentially insufficient documentation about the presence of search history in com.googlecode.iterm2.plist, which might allow remote attackers to obtain sensitive information, as demonstrated by searching for the NoSyncSearchHistory string in .plist files within public Git repositories.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01421 · 72.6th percentile
Published
2019-11-17T10:59Z
EPSS history
Timeline
  • 17 NOV 10:59Z
    iTerm2 through 3.3.6 has potentially insufficient documentation about the presence of search history in com.googlecode.iterm2.plist, which might allow remote…
    cvelistv5