CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-1000072

iRedMail version prior to commit f04b8ef contains a Insecure Permissions vulnerability in Roundcube Webmail that can result in Exfiltrate a user's password protected secret GPG key file and other important configuration files.. This attack appear to be exploitable via network connectivity. This vulnerability appears to have been fixed in Beta: 0.9.8-BETA1, Stable: 0.9.7.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.003

EPSS Ranking 52.5%

CVSS Severity

CVSS v3 Score 7.5

CVSS v2 Score 5.0

References

Products affected by CVE-2018-1000072

Iredmail » Iredmail » Version: 0.8.0

cpe:2.3:a:iredmail:iredmail:0.8.0
Iredmail » Iredmail » Version: 0.8.1

cpe:2.3:a:iredmail:iredmail:0.8.1
Iredmail » Iredmail » Version: 0.8.2

cpe:2.3:a:iredmail:iredmail:0.8.2
Iredmail » Iredmail » Version: 0.8.3

cpe:2.3:a:iredmail:iredmail:0.8.3
Iredmail » Iredmail » Version: 0.8.4

cpe:2.3:a:iredmail:iredmail:0.8.4
Iredmail » Iredmail » Version: 0.8.5

cpe:2.3:a:iredmail:iredmail:0.8.5
Iredmail » Iredmail » Version: 0.8.6

cpe:2.3:a:iredmail:iredmail:0.8.6
Iredmail » Iredmail » Version: 0.8.7

cpe:2.3:a:iredmail:iredmail:0.8.7
Iredmail » Iredmail » Version: 0.9.0

cpe:2.3:a:iredmail:iredmail:0.9.0
Iredmail » Iredmail » Version: 0.9.1

cpe:2.3:a:iredmail:iredmail:0.9.1
Iredmail » Iredmail » Version: 0.9.2

cpe:2.3:a:iredmail:iredmail:0.9.2
Iredmail » Iredmail » Version: 0.9.3

cpe:2.3:a:iredmail:iredmail:0.9.3
Iredmail » Iredmail » Version: 0.9.4

cpe:2.3:a:iredmail:iredmail:0.9.4
Iredmail » Iredmail » Version: 0.9.5

cpe:2.3:a:iredmail:iredmail:0.9.5
Iredmail » Iredmail » Version: 0.9.5-1

cpe:2.3:a:iredmail:iredmail:0.9.5-1
Iredmail » Iredmail » Version: 0.9.6

cpe:2.3:a:iredmail:iredmail:0.9.6

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-1000072

Products

Pricing

Contact Us