CVE-2014-2014
imapsync before 1.584, when running with the --tls option, attempts a cleartext login when a...
imapsync before 1.584, when running with the --tls option, attempts a cleartext login when a certificate verification failure occurs, which allows remote attackers to obtain credentials by sniffing the network.
Exploit likelihood
What each source reports
NVD Score used
imapsync before 1.584, when running with the --tls option, attempts a cleartext login when a certificate verification failure occurs, which allows remote attackers to obtain credentials by sniffing the network.
- Record
CVE-2014-2014- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:P/I:N/A:N - Weakness
- CWE-255
- Updated
- 2026-11-02
CVE List No score
imapsync before 1.584, when running with the --tls option, attempts a cleartext login when a certificate verification failure occurs, which allows remote attackers to obtain credentials by sniffing the network.
- Record
CVE-2014-2014- Updated
- 2026-11-02
EUVDEUVD-2014-2066 No score
imapsync before 1.584, when running with the --tls option, attempts a cleartext login when a certificate verification failure occurs, which allows remote attackers to obtain credentials by sniffing the network.
- Record
EUVD-2014-2066- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-66m3-3h5c-j36m No score
imapsync before 1.584, when running with the --tls option, attempts a cleartext login when a...
imapsync before 1.584, when running with the --tls option, attempts a cleartext login when a certificate verification failure occurs, which allows remote attackers to obtain credentials by sniffing the network.
- Record
GHSA-66m3-3h5c-j36m- Updated
- 2026-11-02
OSVMGASA-2014-0106 No score
Updated imapsync package fixes CVE-2014-2014
Updated imapsync package fixes security vulnerability:
In imapsync before 1.584, a certificate verification failure when using the --tls option results in imapsync attempting a cleartext login (CVE-2014-2014).
- Record
MGASA-2014-0106- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2014-2014 is a medium vulnerability (CVSS 4.3) in Imapsync Project Imapsync, published February 27, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.54%, the 74th percentile. Fixed in imapsync 1.584-1.mga3.