Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:28243
HistoryDec 06, 2020 - 3:36 a.m.

Arbitrary Password Reset

2020-12-0603:36:27
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
19
roundcube
password reset
vulnerability
virtualmin
sasl driver

EPSS

0.003

Percentile

71.5%

Roundcube is vulnerable to arbitrary password resets. The vulnerability existed because of an improperly restricted exec call in the virtualmin and sasl drivers of the password plugin.