Authentication flaw

2018-01-0320:29:00

PRIOn knowledge base

www.prio-n.com

7.3 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

Nylas Mail Lives 2.2.2 uses 0755 permissions for $HOME/.nylas-mail, which allows local users to obtain sensitive authentication information via standard filesystem operations.

CPENameOperatorVersion
nylas_maileq2.2.2

CPE	Name	Operator	Version
	nylas_mail	eq	2.2.2

References

github.com/nylas-mail-lives/nylas-mail/issues/181