Detections
Analytics
Alpine: multiple postfixadmin packages: security update to 2.93-r1 (deprecated)
low Tenable Cloud Security Plugin ID 400915
Description
There are packages installed that are affected by a vulnerability referenced in the following CVE:- The AliasHandler component in PostfixAdmin before 3.0.2 allows remote authenticated domain admins to
delete protected aliases via the delete parameter to delete.php, involving a missing permission check.
(CVE-2017-5930)
See Also
https://git.alpinelinux.org/aports/commit/?id=5c1fabddcbe2a30d67fa87f995b2469b982e9096
https://git.alpinelinux.org/aports/commit/?id=d629db1038ee095d9f7ce5893d4b9b5f6468c106
Plugin Details
Severity: Low
ID: 400915
Version: Revision 1.23
Type: Local
Published: 8/16/2023
Updated: 7/2/2026
Supported Sensors: Agentless Assessment, Tenable Cloud Security, Tenable Self-Hosted Container Security
Risk Information
VPR
Risk Factor: Low
Score: 1.2
Percentile: 0.01
CVSS v2
Risk Factor: Low
Base Score: 3.5
Temporal Score: 2.6
Vector: CVSS2#AV:N/AC:M/Au:S/C:N/I:P/A:N
CVSS Score Source: CVE-2017-5930
CVSS v3
Risk Factor: Low
Base Score: 2.7
Temporal Score: 2.4
Vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
Exploit Ease: No known exploits are available
Patch Publication Date: 2/13/2017
Vulnerability Publication Date: 2/7/2017
Reference Information
CVE: CVE-2017-5930
BID: 96142