Approved changes feed: RSS · Atom

cpe:2.3:a:iredmail:iredmail:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorIredmail (e505f3c8-71c6-5699-aba6-3e0a098a5cd0)
ProductIredmail (2f10afcc-f4f6-532e-b1c1-0ecb108eb23b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:githubm/iredmail/iredmail purl2cpe 2026-06-01 10:14:03.482766

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-1000072 vulnerable 2026-06-08 05:10:25.391997 Details available
iRedMail version prior to commit f04b8ef contains a Insecure Permissions vulnerability in Roundcube Webmail that can result in Exfiltrate a user's password protected secret GPG key file and other important configuration files.. This attack appear to be exploitable via network connectivity. This vulnerability appears to have been fixed in Beta: 0.9.8-BETA1, Stable: 0.9.7.
Published: 2018-03-13T15:00:00.000Z
Updated: 2024-08-05T12:33:49.203Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.