5

CVE-2010-0463

Horde IMP 4.3.6 and earlier does not request that the web browser avoid DNS prefetching of domain names contained in e-mail messages, which makes it easier for remote attackers to determine the network location of the webmail user by logging DNS requests.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Horde ≫ Imp Version <= 4.3.6
Horde ≫ Imp Version 2.0
Horde ≫ Imp Version 2.2
Horde ≫ Imp Version 2.2.1
Horde ≫ Imp Version 2.2.2
Horde ≫ Imp Version 2.2.3
Horde ≫ Imp Version 2.2.4
Horde ≫ Imp Version 2.2.5
Horde ≫ Imp Version 2.2.6
Horde ≫ Imp Version 2.2.7
Horde ≫ Imp Version 2.2.8
Horde ≫ Imp Version 2.3
Horde ≫ Imp Version 3.0
Horde ≫ Imp Version 3.1
Horde ≫ Imp Version 3.1.2
Horde ≫ Imp Version 3.2
Horde ≫ Imp Version 3.2.1
Horde ≫ Imp Version 3.2.2
Horde ≫ Imp Version 3.2.3
Horde ≫ Imp Version 3.2.4
Horde ≫ Imp Version 3.2.5
Horde ≫ Imp Version 3.2.6
Horde ≫ Imp Version 3.2.7
Horde ≫ Imp Version 3.2.7 Update rc1
Horde ≫ Imp Version 4.0
Horde ≫ Imp Version 4.0.1
Horde ≫ Imp Version 4.0.2
Horde ≫ Imp Version 4.0.3
Horde ≫ Imp Version 4.0.4
Horde ≫ Imp Version 4.1.3
Horde ≫ Imp Version 4.1.5
Horde ≫ Imp Version 4.1.6
Horde ≫ Imp Version 4.2
Horde ≫ Imp Version 4.2.1
Horde ≫ Imp Version 4.2.2
Horde ≫ Imp Version 4.3
Horde ≫ Imp Version 4.3.1
Horde ≫ Imp Version 4.3.2
Horde ≫ Imp Version 4.3.3
Horde ≫ Imp Version 4.3.4
Horde ≫ Imp Version 4.3.5
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.95% 0.776
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

https://secure.grepular.com/DNS_Prefetch_Exposure_on_Thunderbird_and_Webmail
http://bugs.horde.org/ticket/8836
Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/56052