CVE-2014-3494

2014-07-0100:00:00

ubuntu.com

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

43.8%

JSON

kio/usernotificationhandler.cpp in the POP3 kioslave in kdelibs 4.10.95
before 4.13.3 does not properly generate warning notifications, which
allows man-in-the-middle attackers to obtain sensitive information via an
invalid certificate.

Bugs

Notes

Author	Note
mdeslaur	affects 4.10.95 to 4.13.2

OSVersionArchitecturePackageVersionFilename
ubuntu13.10noarchkde4libs< 4:4.11.5-0ubuntu0.3UNKNOWN
ubuntu14.04noarchkde4libs< 4:4.13.1-0ubuntu0.2UNKNOWN