Ribose RNP before 0.16.3 sometimes lets secret keys remain unlocked after use.
Weakness
The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Rnp | Ribose | * | 0.16.3 (excluding) |
| Rnp | Ubuntu | kinetic | * |
| Rnp | Ubuntu | lunar | * |
| Rnp | Ubuntu | mantic | * |
| Rnp | Ubuntu | oracular | * |
| Rnp | Ubuntu | plucky | * |
| Rnp | Ubuntu | trusty | * |
| Rnp | Ubuntu | xenial | * |