Lucene search

K
ubuntucveUbuntu.comUB:CVE-2014-9587
HistoryJan 15, 2015 - 12:00 a.m.

CVE-2014-9587

2015-01-1500:00:00
ubuntu.com
ubuntu.com
14

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

0.002

Percentile

56.5%

Multiple cross-site request forgery (CSRF) vulnerabilities in Roundcube
Webmail before 1.0.4 allow remote attackers to hijack the authentication of
unspecified victims via unknown vectors, related to (1) address book
operations or the (2) ACL or (3) Managesieve plugins.

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

0.002

Percentile

56.5%