3 results (0.003 seconds)

CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 0

CVE-2022-28218

https://notcve.org/view.php?id=CVE-2022-28218

26 Apr 2022 — An issue was discovered in CipherMail Webmail Messenger 1.1.1 through 4.1.4. A local attacker could access secret keys (found in a Roundcube configuration file) that are used to protect Webmail user passwords and two-factor authentication (2FA). Se ha detectado un problema en CipherMail Webmail Messenger versiones 1.1.1 hasta 4.1.4. Un atacante local podría acceder a las claves secretas (que son encontradas en un archivo de configuración de Roundcube) que son usadas para proteger las contraseñas de los usua... • https://ciphermail.com • CWE-276: Incorrect Default Permissions •

CVSS: 9.0EPSS: 3%CPEs: 2EXPL: 3

CVE-2020-12713 – CipherMail Community Virtual Appliance 4.6.2 Code Execution

https://notcve.org/view.php?id=CVE-2020-12713

09 Jun 2020 — An issue was discovered in CipherMail Community Gateway and Professional/Enterprise Gateway 1.0.1 through 4.7.1-0 and CipherMail Webmail Messenger 1.1.1 through 3.1.1-0. Attackers with administrative access to the web interface have multiple options to escalate their privileges to the Unix root account. Se detectó un problema en CipherMail Community Gateway y Professional/Enterprise Gateway versiones 1.0.1 hasta 4.7.1-0 y CipherMail Webmail Messenger versiones 1.1.1 hasta 3.1.1-0. Los atacantes con acceso a... • https://packetstorm.news/files/id/158001 • CWE-269: Improper Privilege Management •

CVSS: 5.9EPSS: 0%CPEs: 2EXPL: 3

CVE-2020-12714 – CipherMail Community Virtual Appliance 4.6.2 Code Execution

https://notcve.org/view.php?id=CVE-2020-12714

09 Jun 2020 — An issue was discovered in CipherMail Community Gateway Virtual Appliances and Professional/Enterprise Gateway Virtual Appliances versions 1.0.1 through 4.7.1-0 and CipherMail Webmail Messenger Virtual Appliances 1.1.1 through 3.1.1-0. A Diffie-Hellman parameter of insufficient size could allow man-in-the-middle compromise of communications between CipherMail products and external SMTP clients. Se detectó un problema en CipherMail Community Gateway Virtual Appliances y Professional/Enterprise Gateway Virtua... • https://packetstorm.news/files/id/158001 • CWE-326: Inadequate Encryption Strength •