CVE-2014-2014

Name: CVE-2014-2014
Creator: NVD / NIST
Published: 2014-04-18T22:14:35.98+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 1.54%

Last modified Jun 17, 2026

CVE-2014-2014 is a vulnerability of currently unknown severity. imapsync before 1.584, when running with the --tls option, attempts a cleartext login when a certificate verification failure occurs, which allows remote attackers to obtain credentials by sniffing the network.. EPSS estimates a 1.54% chance of exploitation in the next 30 days.

Description

imapsync before 1.584, when running with the --tls option, attempts a cleartext login when a certificate verification failure occurs, which allows remote attackers to obtain credentials by sniffing the network.

Metrics

EPSS Probability

1.54%

71.6th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-255

Affected Software

Vendor	Product	Versions
Imapsync Project	Imapsync	<= 1.580
Imapsync Project	Imapsync	1.53
Imapsync Project	Imapsync	1.500
Imapsync Project	Imapsync	1.504
Imapsync Project	Imapsync	1.508
Imapsync Project	Imapsync	1.516
Imapsync Project	Imapsync	1.518
Imapsync Project	Imapsync	1.525
Imapsync Project	Imapsync	1.542
Imapsync Project	Imapsync	1.547
Imapsync Project	Imapsync	1.554
Imapsync Project	Imapsync	1.558
Imapsync Project	Imapsync	1.564
Imapsync Project	Imapsync	1.567
Imapsync Project	Imapsync	1.569

References

Timeline

Published: Apr 18, 2014
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2014-2014?

How severe is CVE-2014-2014?

Severity scoring for CVE-2014-2014 is pending analysis. The EPSS model estimates a 1.54% probability of exploitation in the next 30 days.

How do I fix CVE-2014-2014?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2014-2014?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST