Vulnerability in Almanah Project

CVE-2013-1853

Almanah Diary 0.9.0 and 0.10.0 does not encrypt the database when closed, which allows local users to obtain sensitive information by reading the database.

Vulnerability class: POODLE (CVE-2014-3566)

EPSS: 0.004 (29.6th percentile) — read the EPSS interpretation.

Affected products

Almanah_project Almanah — versions 0.9.0, 0.10.0
N/a — versions n/a

Weakness classification (CWE)

CWE-310 — Cryptographic Issues

References

secalert@redhat.com (x_refsource_CONFIRM)
secalert@redhat.com (x_refsource_CONFIRM)
secalert@redhat.com (vendor-advisory, x_refsource_SUSE)
secalert@redhat.com (mailing-list, x_refsource_MLIST)
secalert@redhat.com (x_refsource_CONFIRM)