CVEvulnerability

CVE-2017-1000024

7.5 HIGH Published 2017-07-17 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2017-07-17
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
7.5 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
CWE-319

Description

Shotwell version 0.24.4 or earlier and 0.25.3 or earlier is vulnerable to an information disclosure in the web publishing plugins resulting in potential password and oauth token plaintext transmission

Affected configurations

• gnome shotwell (>= 0.24.0 <= 0.24.4) • gnome shotwell (>= 0.25.0 <= 0.25.3)

Related

Weakness · CWE (1)

  • CWE-319 Cleartext Transmission of Sensitive Information weakness

References