CVE-2018-14023

EUVD-2018-5953
Open Whisper Signal (aka Signal-Desktop) before 1.15.0-beta.10 allows information leakage.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4 MEDIUM
LOCAL
LOW
NONE
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 21%
Affected Products (NVD)
VendorProductVersion
signalsignal-desktop
𝑥
< 1.15.0
signalsignal-desktop
1.15.0:beta1
signalsignal-desktop
1.15.0:beta2
signalsignal-desktop
1.15.0:beta3
signalsignal-desktop
1.15.0:beta4
signalsignal-desktop
1.15.0:beta5
signalsignal-desktop
1.15.0:beta6
signalsignal-desktop
1.15.0:beta7
signalsignal-desktop
1.15.0:beta8
signalsignal-desktop
1.15.0:beta9
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://n0sign4l.blogspot.com/2018/08/advisory-id-n0sign4l-002-risk-level-4-5.html?m=1
https://www.youtube.com/watch?v=oSJscEei5SE&app=desktop
http://n0sign4l.blogspot.com/2018/08/advisory-id-n0sign4l-002-risk-level-4-5.html?m=1
https://www.youtube.com/watch?v=oSJscEei5SE&app=desktop