CVE-2010-1568 — MEDIUM (5.0)

Q: How severe is CVE-2010-1568?

CVE-2010-1568 has been rated MEDIUM with a CVSS base score of 5.0/10. Review the CVSS metrics above for detailed severity breakdown.

Q: Is there a patch for CVE-2010-1568?

Check the references section above for vendor advisories and patch information. Affected products include: Cisco Ironport Desktop Flag Plugin For Outlook.

Vulnerability Description

The Send Secure functionality in the Cisco IronPort Desktop Flag Plug-in for Outlook before 6.5.0-006 does not properly handle simultaneously composed messages, which might allow remote attackers to obtain cleartext contents of e-mail messages that were intended to be encrypted, aka bug 65623.

CVSS Score

5.0

MEDIUM

AV:N/AC:L/Au:N/C:P/I:N/A:N

Confidentiality

PARTIAL

Integrity

NONE

Availability

NONE

Affected Products

Vendor	Product	Versions
Cisco	Ironport Desktop Flag Plugin For Outlook	<= 6.5.0

Related Weaknesses (CWE)

CWE-310

References

http://www.cisco.com/en/US/products/products_security_response09186a0080b2c505.hVendor Advisory
http://www.cisco.com/en/US/products/products_security_response09186a0080b2c505.hVendor Advisory

FAQ

What is CVE-2010-1568?

CVE-2010-1568 is a vulnerability with a CVSS score of 5.0 (MEDIUM). The Send Secure functionality in the Cisco IronPort Desktop Flag Plug-in for Outlook before 6.5.0-006 does not properly handle simultaneously composed messages, which might allow remote attackers to o...

How severe is CVE-2010-1568?

CVE-2010-1568 has been rated MEDIUM with a CVSS base score of 5.0/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2010-1568?

Check the references section above for vendor advisories and patch information. Affected products include: Cisco Ironport Desktop Flag Plugin For Outlook.