CVE-2017-1000485

Published January 3rd, 2018

View on NVD ↗

CVSS v3

N/A

CVSS v2

2.1

LOW

Affected

PROJECT

Description

Nylas Mail Lives 2.2.2 uses 0755 permissions for $HOME/.nylas-mail, which allows local users to obtain sensitive authentication information via standard filesystem operations.

nylas-mail-lives/nylas-mail

:love_letter: An extensible desktop mail app built on the modern web.

GitHub

470