CVE Vulnerability

CVE-2018-14023

Open Whisper Signal (aka Signal-Desktop) before 1.15.0-beta.10 allows information leakage.

2.1 /10

CVSS v2.0 :

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 2.9

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

Scope

4 /10

CVSS v3.0 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.5 / Impact : 1.4

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://www.youtube.com/watch?v=oSJscEei5SE&app=desktop Exploit Third Party Advisory
http://n0sign4l.blogspot.com/2018/08/advisory-id-n0sign4l-002-risk-level-4-5.html?m=1 Exploit Third Party Advisory
Configurations

Configuration 1

cpe:2.3:a:signal:signal-desktop:1.15.0:beta1:*:*:*:*:*:*
cpe:2.3:a:signal:signal-desktop:1.15.0:beta2:*:*:*:*:*:*
cpe:2.3:a:signal:signal-desktop:1.15.0:beta3:*:*:*:*:*:*
cpe:2.3:a:signal:signal-desktop:1.15.0:beta4:*:*:*:*:*:*
cpe:2.3:a:signal:signal-desktop:1.15.0:beta5:*:*:*:*:*:*
cpe:2.3:a:signal:signal-desktop:1.15.0:beta6:*:*:*:*:*:*
cpe:2.3:a:signal:signal-desktop:1.15.0:beta7:*:*:*:*:*:*
cpe:2.3:a:signal:signal-desktop:1.15.0:beta8:*:*:*:*:*:*
cpe:2.3:a:signal:signal-desktop:1.15.0:beta9:*:*:*:*:*:*
cpe:2.3:a:signal:signal-desktop:*:*:*:*:*:*:*:*
Information

Published : 2018-08-20 10:29

Updated : 2018-10-15 05:30

NVD link : CVE-2018-14023

Mitre link : CVE-2018-14023

Products Affected
No products.
CWE
CWE-200