CVE-2019-12938 | BDVDB-2026-118255 Detail

Description#

The Roundcube component of Analogic Poste.io 2.1.6 uses .htaccess to protect the logs/ folder, which is effective with the Apache HTTP Server but is ineffective with nginx. Attackers can read logs via the webmail/logs/sendmail URI.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://bitbucket.org/analogic/mailserver/issues/665/posteio-logs-leak
https://poste.io/changelog

Exploit#

No public exploit known

History#

Version 12019-06-24Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.