Imapsync Project

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Imapsync Project records in CISA KEV

No Imapsync Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Imapsync 3 records MEDIUM

Records

3 records in Imapsync · all components

TI-2023-17042 CVE-2023-34204 · GHSA-pwpq-84p4-86mx

imapsync through 2.229 uses predictable paths under /tmp and /var/tmp in its default mode…

MEDIUM 62

imapsync through 2.229 uses predictable paths under /tmp and /var/tmp in its default mode of operation.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00625 Published 2023-05-30 No fix listed CWE-59

TI-2013-03745 CVE-2013-4279 · GHSA-9wf9-q5vr-wvw9

imapsync 1.564 and earlier performs a release check by default, which sends sensitive…

LOW 27

imapsync 1.564 and earlier performs a release check by default, which sends sensitive information (imapsync, operating system, and Perl version) to the developer's site.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01838 Published 2014-04-18 No fix listed CWE-200

TI-2014-01578 CVE-2014-2014 · GHSA-66m3-3h5c-j36m

imapsync before 1.584, when running with the --tls option, attempts a cleartext login…

LOW 23

imapsync before 1.584, when running with the --tls option, attempts a cleartext login when a certificate verification failure occurs, which allows remote attackers to obtain credentials by sniffing the network.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01544 Published 2014-04-18 No fix listed CWE-255

Open these records in search →

Critical	0
High	0
Medium	3
Low	0
No CVSS	0