VDB
GCVE-VVD-MAGEIA-2017-409
GCVE-VVD-MAGEIA-2017-409
Advisory Published
It was discovered that roundcubemail contained a zero-day file disclosure
vulnerability caused by insuficient input validation which was currently
being exploited by hackers to read roundcube's configuration files and
steal its database credentials (CVE-2017-16651).
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Mageia | roundcubemail | 0 (affected), 1.2.5-1.1.mga6 (unaffected) | — |
| Mageia | roundcubemail | 0 (affected), 1.0.11-1.1.mga5 (unaffected) | — |
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.