Ribose RNP before 0.16.3 sometimes lets secret keys remain unlocked after use.
The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Rnp | Ribose | * | 0.16.3 (excluding) |
Rnp | Ubuntu | kinetic | * |
Rnp | Ubuntu | lunar | * |
Rnp | Ubuntu | mantic | * |
Rnp | Ubuntu | oracular | * |
Rnp | Ubuntu | trusty | * |
Rnp | Ubuntu | xenial | * |