Vulnerability in Cisco Ironport Desktop Flag Plugin For Outlook
CVE-2010-1568
The Send Secure functionality in the Cisco IronPort Desktop Flag Plug-in for Outlook before 6.5.0-006 does not properly handle simultaneously composed messages, which might allow remote attackers to obtain cleartext contents of e-mail messages that were intended to be encrypted, aka bug 65623.
Vulnerability class: POODLE (CVE-2014-3566)
EPSS: 0.011 (61.6th percentile) — read the EPSS interpretation.
Affected products
- Cisco Ironport_desktop_flag_plugin_for_outlook — versions 6.2.4.3
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)