4 matches found
CVE-2017-17845
An issue was discovered in Enigmail before 1.9.9. Improper Random Secret Generation occurs because Math.Random is used by pretty Easy privacy pEp, aka TBE-01-001...
7.5CVSS7.1AI score0.01608EPSS
SaveExploits0References5
Design/Logic Flaw
An issue was discovered in Enigmail before 1.9.9. Improper Random Secret Generation occurs because Math.Random is used by pretty Easy privacy pEp, aka TBE-01-001...
7.5CVSS7.1AI score0.01608EPSS
SaveExploits0References5Affected Software2
CVE-2017-17845
CVE-2017-17845 affects Enigmail (Thunderbird extension) before 1.9.9. The issue is improper random secret generation because Math.Random() is used by pretty Easy privacy (pEp). Impact: potential confidentiality/integrity/availability concerns as per CVSS metrics (base score 7.3–7.5, HIGH). Affect...
7.5CVSS7.2AI score0.01608EPSS
SaveExploits0References5Affected Software1
20