Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-5jgp-7xfp-x54p

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

roundcube version 1.3.4 and earlier contains an Insecure Permissions vulnerability in enigma plugin that can result in exfiltration of gpg private key. This attack appear to be exploitable via network connectivity.

roundcube version 1.3.4 and earlier contains an Insecure Permissions vulnerability in enigma plugin that can result in exfiltration of gpg private key. This attack appear to be exploitable via network connectivity.

EPSS

Процентиль: 52%
0.00291
Низкий

7.5 High

CVSS3

Дефекты

CWE-732

Связанные уязвимости

CVSS3: 7.5
ubuntu
почти 8 лет назад

roundcube version 1.3.4 and earlier contains an Insecure Permissions vulnerability in enigma plugin that can result in exfiltration of gpg private key. This attack appear to be exploitable via network connectivity.

CVSS3: 7.5
nvd
почти 8 лет назад

roundcube version 1.3.4 and earlier contains an Insecure Permissions vulnerability in enigma plugin that can result in exfiltration of gpg private key. This attack appear to be exploitable via network connectivity.

CVSS3: 7.5
debian
почти 8 лет назад

roundcube version 1.3.4 and earlier contains an Insecure Permissions v ...

EPSS

Процентиль: 52%
0.00291
Низкий

7.5 High

CVSS3

Дефекты

CWE-732