Lucene search

K
mageiaGentoo FoundationMGASA-2017-0409
HistoryNov 16, 2017 - 10:39 a.m.

Updated roundcubemail packages fix security vulnerability

2017-11-1610:39:32
Gentoo Foundation
advisories.mageia.org
15

0.015 Low

EPSS

Percentile

86.8%

It was discovered that roundcubemail contained a zero-day file disclosure vulnerability caused by insuficient input validation which was currently being exploited by hackers to read roundcube’s configuration files and steal its database credentials (CVE-2017-16651).