CVE-2018-1000071 | BDVDB-2026-97743 Detail

Description#

roundcube version 1.3.4 and earlier contains an Insecure Permissions vulnerability in enigma plugin that can result in exfiltration of gpg private key. This attack appear to be exploitable via network connectivity.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.legacysecuritygroup.com/cve/references/02122018-roundcube-enigma.txt
https://github.com/roundcube/roundcubemail/issues/6173

Exploit#

No public exploit known

History#

Version 12018-03-13Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.