high7.5
CVE-2016-9107
The OTR plugin for Gajim sends information in cleartext when using XHTML, which allows remote attackers to obtain sensitive information via unspecified vectors.
Impact
The OTR plugin for Gajim sends information in cleartext when using XHTML, which allows remote attackers to obtain sensitive information via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Otr | Gajim-Otr | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.openwall.com/lists/oss-security/2016/10/30/11
- http://www.openwall.com/lists/oss-security/2016/10/30/2
- http://www.securityfocus.com/bid/94099
- https://dev.gajim.org/gajim/gajim-plugins/issues/145
- https://trac-plugins.gajim.org/changeset/c7c2e519ed63377bc943dd01c4661b0fe49321ae
- http://www.openwall.com/lists/oss-security/2016/10/30/11
- http://www.openwall.com/lists/oss-security/2016/10/30/2
- http://www.securityfocus.com/bid/94099
- https://dev.gajim.org/gajim/gajim-plugins/issues/145
- https://trac-plugins.gajim.org/changeset/c7c2e519ed63377bc943dd01c4661b0fe49321ae