KLA11369 Information disclosure Vulnerability in Evernote

Untrusted search path vulnerability was found in Evernote. Malicious users can exploit this vulnerability to obtain sensitive information.

Original advisories

CVE-2016-4900

Related products

EverNote

CVE list

CVE-2016-4900 high

Solution

Update to the latest version

Evernote

Impacts

• ACE

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

• OSI

Obtain sensitive information. Exploitation of vulnerabilities with this impact can lead to capturing by abuser information, critical for user or system.

Affected Products

• Evernote for Windows versions prior to 6.3