CVE

Id
49403  
CVE No.
CVE-2011-1491  
Status
Candidate  
Description
The login form in Roundcube Webmail before 0.5.1 does not properly handle a correctly authenticated but unintended login attempt, which makes it easier for remote authenticated users to obtain sensitive information by arranging for a victim to login to the attacker"s account and then compose an e-mail message, related to a "login CSRF" issue.  
Phase
Assigned (20110321)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
536243 49403 CVE-2011-1491 MLIST:[oss-security] 20110324 CVE request: roundcube < 0.5.1 CSRF  View
536244 49403 CVE-2011-1491 URL:http://openwall.com/lists/oss-security/2011/03/24/3  View
536245 49403 CVE-2011-1491 MLIST:[oss-security] 20110324 Re: CVE request: roundcube < 0.5.1 CSRF  View
536246 49403 CVE-2011-1491 URL:http://openwall.com/lists/oss-security/2011/03/24/4  View
536247 49403 CVE-2011-1491 MLIST:[oss-security] 20110404 Re: CVE request: roundcube < 0.5.1 CSRF  View
536248 49403 CVE-2011-1491 URL:http://openwall.com/lists/oss-security/2011/04/04/50  View
536249 49403 CVE-2011-1491 CONFIRM:http://trac.roundcube.net/changeset/4490  View
536250 49403 CVE-2011-1491 CONFIRM:http://trac.roundcube.net/wiki/Changelog  View
536251 49403 CVE-2011-1491 XF:roundcube-login-info-disclosure(66815)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
34163 JVNDB-2011-004405 tmux における utmp グループ権限を取得される脆弱性 tmux は、適切にグループ権限を設定しないため、utmp グループ権限を取得される脆弱性が存在します。 CVE-2011-1496 49403 4.6 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004405.html  View