CVE-2016-10727: Infoleak
camel/providers/imapx/camel-imapx-server.c in the IMAPx component in GNOME evolution-data-server before 3.21.2 proceeds with cleartext data containing a password if the client wishes to use STARTTLS but the server will not use STARTTLS, which makes it easier for remote attackers to obtain sensitive information by sniffing the network. The server code was intended to report an error and not proceed, but the code was written incorrectly.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2016-10727?
CVE-2016-10727 is a critical vulnerability in GNOME evolution-data-server that allows remote attackers to obtain sensitive information.
How does CVE-2016-10727 affect evolution-data-server?
CVE-2016-10727 affects evolution-data-server versions before 3.21.2.
What is the severity of CVE-2016-10727?
CVE-2016-10727 has a severity rating of 9.8 (Critical).
How can I fix CVE-2016-10727?
To fix CVE-2016-10727, you should update evolution-data-server to version 3.21.2 or higher.
Where can I find more information about CVE-2016-10727?
You can find more information about CVE-2016-10727 in the references provided: [link 1], [link 2], [link 3].