Vulnerabilities > CVE-2007-1191 - Information Disclosure vulnerability in Quicksilver Del.Icio.Us Module 8F

047910
CVSS 2.1 - LOW
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
NONE
Availability impact
NONE
local
low complexity
quicksilver

Summary

The Social Bookmarks (del.icio.us) plug-in 8F in Quicksilver writes usernames and passwords in plaintext to the /Library/Logs/Console/UID/Console.log file, which allows local users to obtain sensitive information by reading this file.

Vulnerable Configurations

Part Description Count
Application
Quicksilver
1