Roundcube Webmail CVE-2015-5382 Information Disclosure Vulnerability
BID:98673
Info
Roundcube Webmail CVE-2015-5382 Information Disclosure Vulnerability
| Bugtraq ID: | 98673 |
| Class: | Input Validation Error |
| CVE: |
CVE-2015-5382 |
| Remote: | Yes |
| Local: | No |
| Published: | May 23 2017 12:00AM |
| Updated: | May 23 2017 12:00AM |
| Credit: | nrogers |
| Vulnerable: |
Roundcube Webmail 1.1.1 Roundcube Webmail 0.1.1 Roundcube Webmail 1.1.0 |
| Not Vulnerable: |
Roundcube Webmail 1.1.2 Roundcube Webmail 1.0.6 |
Discussion
Roundcube Webmail CVE-2015-5382 Information Disclosure Vulnerability
Roundcube Webmail is prone to an information-disclosure vulnerability.
Attackers can exploit this issue to gain access to sensitive information. Information obtained may lead to further attacks.
Roundcube Webmail is prone to an information-disclosure vulnerability.
Attackers can exploit this issue to gain access to sensitive information. Information obtained may lead to further attacks.
References
Roundcube Webmail CVE-2015-5382 Information Disclosure Vulnerability
References:
References:
- RoundCube Webmail Homepage (RoundCube)
- Fix security issue in contact photo handling (#1490379) (roundcube)
- Potential arbitrary read through uploaded vcard #4817 (roundcube)
- Updates 1.1.2 and 1.0.6 released (roundcube)