CVE-2017-8114

high

Description

Roundcube Webmail allows arbitrary password resets by authenticated users. This affects versions before 1.0.11, 1.1.x before 1.1.9, and 1.2.x before 1.2.5. The problem is caused by an improperly restricted exec call in the virtualmin and sasl drivers of the password plugin.

References

https://roundcube.net/news/2017/04/28/security-updates-1.2.5-1.1.9-and-1.0.11

https://github.com/ilsani/rd/tree/master/security-advisories/web/roundcube/cve-2017-8114

https://security.gentoo.org/glsa/201707-11

http://www.securityfocus.com/bid/98445

Details

Source: MITRE

Published: 2017-04-29

Updated: 2022-09-27

Type: CWE-269

Risk Information

CVSS v2

Base Score: 6.5

Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P

Impact Score: 6.4

Exploitability Score: 8

Severity: MEDIUM

CVSS v3

Base Score: 8.8

Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Impact Score: 5.9

Exploitability Score: 2.8

Severity: HIGH