• caglararli@hotmail.com
  • 05386281520

CVE-2023-52723 | KDE libksieve prior 23.03.80 kmanagesieve/session.cpp username missing encryption

Çağlar Arlı      -    4 Views

CVE-2023-52723 | KDE libksieve prior 23.03.80 kmanagesieve/session.cpp username missing encryption

A vulnerability classified as problematic has been found in KDE libksieve. Affected is an unknown function of the file kmanagesieve/session.cpp. The manipulation of the argument username leads to missing encryption of sensitive data. This vulnerability is traded as CVE-2023-52723. Access to the local network is required for this attack to succeed. There is no exploit available. It is recommended to upgrade the affected component.