« Volver al listado

CVE-2014-2014

Estado: ModificadaMedia (4.3)—

imapsync before 1.584, when running with the --tls option, attempts a cleartext login when a certificate verification failure occurs, which allows remote attackers to obtain credentials by sniffing the network.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Imapsync Project — Imapsync

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2014-2014",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4.3,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2014-04-18T22:14:35.980",
  "references": [
    {
      "url": "http://seclists.org/oss-sec/2014/q1/367",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://seclists.org/oss-sec/2014/q1/378",
      "tags": [
        "Patch"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.linux-france.org/prj/imapsync_list/msg01907.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.linux-france.org/prj/imapsync_list/msg01910.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2014:060",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://bugs.mageia.org/show_bug.cgi?id=12770",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://github.com/imapsync/imapsync/issues/15",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://lists.fedoraproject.org/pipermail/package-announce/2014-February/128293.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://seclists.org/oss-sec/2014/q1/367",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://seclists.org/oss-sec/2014/q1/378",
      "tags": [
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.linux-france.org/prj/imapsync_list/msg01907.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.linux-france.org/prj/imapsync_list/msg01910.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2014:060",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://bugs.mageia.org/show_bug.cgi?id=12770",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://github.com/imapsync/imapsync/issues/15",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://lists.fedoraproject.org/pipermail/package-announce/2014-February/128293.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-255"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "imapsync before 1.584, when running with the --tls option, attempts a cleartext login when a certificate verification failure occurs, which allows remote attackers to obtain credentials by sniffing the network."
    },
    {
      "lang": "es",
      "value": "imapsync anterior a 1.584, cuando funciona con la opción --tls, intenta un inicio de sesión en texto claro cuando existe un fallo de de verificación de certificado, lo que permite a atacantes remotos obtener credenciales escuchando la red."
    }
  ],
  "lastModified": "2026-06-17T00:05:55.757",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:imapsync_project:imapsync:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "56905459-0B35-43B8-8C47-FBA9139EA823",
              "versionEndIncluding": "1.580"
            },
            {
              "criteria": "cpe:2.3:a:imapsync_project:imapsync:1.53:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B40979AF-EB6A-46EB-99E4-D701581ED1BF"
            },
            {
              "criteria": "cpe:2.3:a:imapsync_project:imapsync:1.500:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5474AB1C-7C65-4DBA-84FC-25225ED0D1F5"
            },
            {
              "criteria": "cpe:2.3:a:imapsync_project:imapsync:1.504:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FAF07F71-64E1-4C03-990B-125F65BE1755"
            },
            {
              "criteria": "cpe:2.3:a:imapsync_project:imapsync:1.508:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8E69E9B3-6B60-42FC-BF19-5D03C18C2D87"
            },
            {
              "criteria": "cpe:2.3:a:imapsync_project:imapsync:1.516:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "89F4D622-A8B7-4694-8299-6CD2A7CC4BC6"
            },
            {
              "criteria": "cpe:2.3:a:imapsync_project:imapsync:1.518:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "561963EC-FC73-4284-91CB-D314EE02B3E3"
            },
            {
              "criteria": "cpe:2.3:a:imapsync_project:imapsync:1.525:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B0BECF9F-1286-4549-8C60-1956024E0662"
            },
            {
              "criteria": "cpe:2.3:a:imapsync_project:imapsync:1.542:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E29744AC-E2CC-4C1E-8C06-8FD13CD44605"
            },
            {
              "criteria": "cpe:2.3:a:imapsync_project:imapsync:1.547:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F9847527-D696-4BEC-A4D7-38ED38AB2C24"
            },
            {
              "criteria": "cpe:2.3:a:imapsync_project:imapsync:1.554:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2DCD5E84-F077-4690-A25E-A026531FE866"
            },
            {
              "criteria": "cpe:2.3:a:imapsync_project:imapsync:1.558:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8BDBB7C4-28E5-4C04-B55B-FC91E96CA0CE"
            },
            {
              "criteria": "cpe:2.3:a:imapsync_project:imapsync:1.564:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A74F9B7A-6DAA-4ECA-8113-4629C7FDD987"
            },
            {
              "criteria": "cpe:2.3:a:imapsync_project:imapsync:1.567:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A525B607-E517-4CAD-80F1-053B8F8AB659"
            },
            {
              "criteria": "cpe:2.3:a:imapsync_project:imapsync:1.569:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AFE68C11-2954-4C9E-8439-CB72D051A12A"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}