Description

roundcube version 1.3.4 and earlier contains an Insecure Permissions vulnerability in enigma plugin that can result in exfiltration of gpg private key. This attack appear to be exploitable via network connectivity.

Remediation

References

CVE-2018-1000071

Related Vulnerabilities

WordPress Plugin Media Library Categories Multiple Cross-Site Scripting Vulnerabilities (1.1.1)

MySQL CVE-2021-35607 Vulnerability (CVE-2021-35607)

WordPress Plugin Resize Image After Upload Cross-Site Request Forgery (1.8.5)

phpBB Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2003-1530)

WordPress Plugin WP Affiliate Platform Multiple Vulnerabilities (6.3.9)

Severity

High

Classification

CVE-2018-1000071 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Tags

Missing Update Known Vulnerabilities