Lucene search

K
cvelistMitreCVELIST:CVE-2017-8114
HistoryApr 29, 2017 - 7:00 p.m.

CVE-2017-8114

2017-04-2919:00:00
mitre
www.cve.org
4

AI Score

8.6

Confidence

High

EPSS

0.003

Percentile

71.5%

Roundcube Webmail allows arbitrary password resets by authenticated users. This affects versions before 1.0.11, 1.1.x before 1.1.9, and 1.2.x before 1.2.5. The problem is caused by an improperly restricted exec call in the virtualmin and sasl drivers of the password plugin.