Information Leakage in Open Whisper Signal Desktop Application
CVE-2018-14023

4MEDIUM

Key Information:

Vendor

Signal

Status
Signal-desktop
Vendor
CVE Published:
20 August 2018

What is CVE-2018-14023?

The Signal-Desktop application before version 1.15.0-beta.10 is susceptible to a vulnerability that allows sensitive information to unintentionally leak. This issue can potentially expose private user data, compromising user privacy and confidentiality. To mitigate this risk, it is crucial for users to upgrade to the latest version of the application to ensure their communications remain secure.

References

http://n0sign4l.blogspot.com/2018/08/advisory-id-n0sign4l...
x_refsource_MISC
https://www.youtube.com/watch?v=oSJscEei5SE&app=desktop
x_refsource_MISC

CVSS V3.1

Score:
4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.