Description
The Delete Private Data feature in Opera before 11.01 does not properly implement the "Clear all email account passwords" option, which might allow physically proximate attackers to access an e-mail account via an unattended workstation.
References
- http://www.opera.com/docs/changelogs/windows/1101/
- oval:org.mitre.oval:def:12507 vdb-entry signature
- http://www.opera.com/support/kb/view/986/
- ADV-2011-0231 vdb-entry
- http://www.opera.com/docs/changelogs/unix/1101/
- 46036 vdb-entry
- http://www.opera.com/docs/changelogs/mac/1101/
- opera-passwords-sec-bypass(65018) vdb-entry
- 70731 vdb-entry
- 43023 third-party-advisory