| Package | Affected versions | Patched versions |
|---|---|---|
| webmail | < 1.3.7 | 1.3.7 |
Roundcube before 1.3.7 mishandles GnuPG MDC integrity-protection warnings, which makes it easier for attackers to obtain sensitive information, a related issue to CVE-2017-17688. This is associated with plugins/enigma/lib/enigma_driver_gnupg.php.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free