CVE-2011-0685

Opera < 11.01 - Unauthenticated Email Account Password Exposure via Delete Private Data Feature

Title source: llm

Description

The Delete Private Data feature in Opera before 11.01 does not properly implement the "Clear all email account passwords" option, which might allow physically proximate attackers to access an e-mail account via an unattended workstation.

References (10)

Core 10

Core References

Vendor Advisory x_refsource_confirm

http://www.opera.com/docs/changelogs/windows/1101/

Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12507

Vendor Advisory x_refsource_confirm

http://www.opera.com/support/kb/view/986/

Third Party Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2011/0231

Vendor Advisory x_refsource_confirm

http://www.opera.com/docs/changelogs/unix/1101/

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/46036

Vendor Advisory x_refsource_confirm

http://www.opera.com/docs/changelogs/mac/1101/

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/65018

Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb

http://osvdb.org/70731

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/43023

Scores

EPSS 0.0007

EPSS Percentile 21.4%

Details

CWE

CWE-20

Status published

Products (30)

opera/opera_browser 5.0 (8 CPE variants)

opera/opera_browser 5.02

opera/opera_browser 5.10

opera/opera_browser 5.11

opera/opera_browser 5.12

opera/opera_browser 6.0 (6 CPE variants)

opera/opera_browser 6.1 (2 CPE variants)

opera/opera_browser 6.01

opera/opera_browser 6.02

opera/opera_browser 6.03

... and 20 more

Published Jan 31, 2011

Tracked Since Feb 18, 2026