CVE-2017-1000485

Nylas Mail Lives 2.2.2 uses 0755 permissions for $HOME/.nylas-mail, which allows local users to obtain sensitive authentication information via standard filesystem operations...

CVE-2017-1000485

CVE-2017-1000485 affects Nylas Mail Lives 2.2.2. The root cause is that the application assigns 0755 permissions to the directory "$HOME/.nylas-mail", enabling local users to read sensitive authentication data via standard filesystem operations. The reports in multiple sources confirm this disclo...