CVE-2013-6237
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:S/C:P/I:N/A:N
AI Score
Confidence
Low
EPSS
Percentile
74.1%
The ISL Desktop plugin for Windows before 1.4.7 for ISL Light 3.5.4 and earlier allows remote authenticated users to obtain sensitive information by pasting the clipboard contents that have been copied by another user in the session.
Affected configurations
| Vendor | Product | Version | CPE |
|---|---|---|---|
| islonline | isl_desktop_plugin | * | cpe:2.3:a:islonline:isl_desktop_plugin:*:-:-:*:windows:isl_light:*:* |
| islonline | isl_desktop_plugin | 1.3.3 | cpe:2.3:a:islonline:isl_desktop_plugin:1.3.3:-:-:*:windows:isl_light:*:* |
| islonline | isl_desktop_plugin | 1.4.1 | cpe:2.3:a:islonline:isl_desktop_plugin:1.4.1:-:-:*:windows:isl_light:*:* |
| islonline | isl_desktop_plugin | 1.4.2 | cpe:2.3:a:islonline:isl_desktop_plugin:1.4.2:-:-:*:windows:isl_light:*:* |
| islonline | isl_light | * | cpe:2.3:a:islonline:isl_light:*:*:*:*:*:*:*:* |
References
osvdb.org/100512
packetstormsecurity.com/files/124274/ISL-Light-Desktop-3.5.4-Information-Disclosure.html
seclists.org/fulldisclosure/2013/Dec/14
www.islonline.com/help/isl-releases-info/any/manual/?2013-11-29-rel-info-isl-light-desktop-plugin-1-4-7-win.htm
www.securityfocus.com/bid/64050
exchange.xforce.ibmcloud.com/vulnerabilities/89399
Related
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:S/C:P/I:N/A:N
AI Score
Confidence
Low
EPSS
Percentile
74.1%