Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Roundcube Improper Privilege Management Vulnerability - CVE-2017-8114 - Vulnerability Database
Roundcube

Roundcube Improper Privilege Management Vulnerability - CVE-2017-8114

High
Reference: CVE-2017-8114
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2017-8114
Title: Roundcube Improper Privilege Management Vulnerability
Overview:

Roundcube Webmail allows arbitrary password resets by authenticated users. This affects versions before 1.0.11 1.1.x before 1.1.9 and 1.2.x before 1.2.5. The problem is caused by an improperly restricted exec call in the virtualmin and sasl drivers of the password plugin.