PT-2015-4296
CVE-2014-9587
·
تاريخ النشر
2015-01-15
·
تاريخ التحديث
2016-02-12
الوصف من
CVSS 2.0
6.8
متوسطةالمقاييسAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
Roundcube Webmail versions prior to 1.0.4
Description
The issue affects Roundcube Webmail, allowing remote attackers to hijack the authentication of victims via unknown vectors. This is related to address book operations or the ACL or Managesieve plugins.
Recommendations
For versions prior to 1.0.4, update to version 1.0.4 or later to resolve the issue. As a temporary workaround, consider restricting access to the address book operations and the ACL or Managesieve plugins until a patch is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾