CVE-2018-1000071

Published: 2018-03-13T15:29Z

Last Modified: 2024-11-21T03:39Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

roundcube version 1.3.4 and earlier contains an Insecure Permissions vulnerability in enigma plugin that can result in exfiltration of gpg private key. This attack appear to be exploitable via network connectivity. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt