Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mf49-p66v-cw5m

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

Roundcube before 1.3.7 mishandles GnuPG MDC integrity-protection warnings, which makes it easier for attackers to obtain sensitive information, a related issue to CVE-2017-17688. This is associated with plugins/enigma/lib/enigma_driver_gnupg.php.

Roundcube before 1.3.7 mishandles GnuPG MDC integrity-protection warnings, which makes it easier for attackers to obtain sensitive information, a related issue to CVE-2017-17688. This is associated with plugins/enigma/lib/enigma_driver_gnupg.php.

EPSS

Процентиль: 76%
0.01631
Низкий

7.5 High

CVSS3

Дефекты

CWE-200

Связанные уязвимости

CVSS3: 7.5
ubuntu
почти 8 лет назад

Roundcube before 1.3.7 mishandles GnuPG MDC integrity-protection warnings, which makes it easier for attackers to obtain sensitive information, a related issue to CVE-2017-17688. This is associated with plugins/enigma/lib/enigma_driver_gnupg.php.

CVSS3: 7.5
nvd
почти 8 лет назад

Roundcube before 1.3.7 mishandles GnuPG MDC integrity-protection warnings, which makes it easier for attackers to obtain sensitive information, a related issue to CVE-2017-17688. This is associated with plugins/enigma/lib/enigma_driver_gnupg.php.

CVSS3: 7.5
debian
почти 8 лет назад

Roundcube before 1.3.7 mishandles GnuPG MDC integrity-protection warni ...

CVSS3: 7.5
altlinux
около 8 лет назад

ALT-PU-2018-2424: package `roundcube` update to version 1.3.7-alt1

EPSS

Процентиль: 76%
0.01631
Низкий

7.5 High

CVSS3

Дефекты

CWE-200