medium5.5
CVE-2022-28218
An issue was discovered in CipherMail Webmail Messenger 1.1.1 through 4.1.4.
Impact
An issue was discovered in CipherMail Webmail Messenger 1.1.1 through 4.1.4. A local attacker could access secret keys (found in a Roundcube configuration file) that are used to protect Webmail user passwords and two-factor authentication (2FA).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ciphermail | Webmail Messenger | from 1.1.1 before 4.2.1 |
Weakness classification
References
- NVD record
- CVE.org record
- https://ciphermail.com
- https://lists.ciphermail.com/hyperkitty/list/security%40lists.ciphermail.com/thread/WRWHQUACXWXQA42KXXQQ6EEP6SBBM5BM/
- https://www.ciphermail.com/webmail-release-notes.html
- https://ciphermail.com
- https://lists.ciphermail.com/hyperkitty/list/security%40lists.ciphermail.com/thread/WRWHQUACXWXQA42KXXQQ6EEP6SBBM5BM/
- https://www.ciphermail.com/webmail-release-notes.html