low2.1
CVE-2013-1853
Almanah Diary 0.9.0 and 0.10.0 does not encrypt the database when closed, which allows local users to obtain sensitive information by reading the database.
Impact
Almanah Diary 0.9.0 and 0.10.0 does not encrypt the database when closed, which allows local users to obtain sensitive information by reading the database.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Almanah Project | Almanah | Versions 0.9.0, 0.10.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=702905
- http://lists.opensuse.org/opensuse-updates/2014-01/msg00080.html
- http://www.openwall.com/lists/oss-security/2013/03/13/1
- https://bugzilla.gnome.org/show_bug.cgi?id=695117
- https://bugzilla.redhat.com/show_bug.cgi?id=920848
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=702905
- http://lists.opensuse.org/opensuse-updates/2014-01/msg00080.html
- http://www.openwall.com/lists/oss-security/2013/03/13/1
- https://bugzilla.gnome.org/show_bug.cgi?id=695117
- https://bugzilla.redhat.com/show_bug.cgi?id=920848