Unrated

roundcube version 1.3.4 and earlier contains an Insecure Permissions vulnerability in enigma plugin that can result in exfiltration of gpg private key...

CVE-2018-1000071 First seen on SecPulse Mar 14, 2018

Fix status by distribution

Fixed packages published by each distribution for this CVE

Debian DEBIAN-CVE-2018-1000071 roundcube Fixed in: 1.3.10+dfsg.1-1

Original description The description as published by the source.

roundcube version 1.3.4 and earlier contains an Insecure Permissions vulnerability in enigma plugin that can result in exfiltration of gpg private key. This attack appear to be exploitable via network connectivity.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory github.com
report legacysecuritygroup.com

Key facts

Severity: Unrated
Published: Mar 14, 2018
First seen on SecPulse: Mar 14, 2018

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:49