CVE-2014-9587

Name of the Vulnerable Software and Affected Versions Roundcube Webmail versions prior to 1.0.4

Description The issue affects Roundcube Webmail, allowing remote attackers to hijack the authentication of victims via unknown vectors. This is related to address book operations or the ACL or Managesieve plugins.

Recommendations For versions prior to 1.0.4, update to version 1.0.4 or later to resolve the issue. As a temporary workaround, consider restricting access to the address book operations and the ACL or Managesieve plugins until a patch is available.