CVE-2023-32290 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	7.5 HIGH	NETWORK	LOW	NONE	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CISA-ADP	ADP	7.5 HIGH	NETWORK	LOW	NONE	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Awaiting analysis

This vulnerability is currently awaiting analysis.

Base Score

CVSS 3.x

EPSS Score

Percentile: 32%

Common Weakness Enumeration

CWE-311 - Missing Encryption of Sensitive Data
The software does not encrypt sensitive or critical information before storage or transmission.
CWE-319 - Cleartext Transmission of Sensitive Information
The software transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.

References

https://apps.apple.com/fm/app/mymail-email-app-for-gmail/id722120997

https://mailbox.org/en/post/mailbox-org-discovers-unencrypted-password-transmission-in-mymail

https://news.ycombinator.com/item?id=35845308

https://apps.apple.com/fm/app/mymail-email-app-for-gmail/id722120997

https://mailbox.org/en/post/mailbox-org-discovers-unencrypted-password-transmission-in-mymail

https://news.ycombinator.com/item?id=35845308