Insecure Encryption Parameters in Mail Drop Feature in Apple OS X

Insecure Encryption Parameters in Mail Drop Feature in Apple OS X

CVE-2015-5884 · LOW Severity

AV:A/AC:L/AU:N/C:P/I:N/A:N

The Mail Drop feature in Mail in Apple OS X before 10.11 mishandles encryption parameters for attachments, which makes it easier for remote attackers to obtain sensitive information by sniffing the network during transmission of an S/MIME e-mail message with a large attachment.

Learn more about our Network Penetration Testing.