Oval Definition:oval:com.ubuntu.xenial:def:20178114000
Revision Date:2017-04-29Version:1
Title:CVE-2017-8114 on Ubuntu 16.04 LTS (xenial) - medium.
Description:Roundcube Webmail allows arbitrary password resets by authenticated users. This affects versions before 1.0.11, 1.1.x before 1.1.9, and 1.2.x before 1.2.5. The problem is caused by an improperly restricted exec call in the virtualmin and sasl drivers of the password plugin.
Family:unixClass:vulnerability
Status:Reference(s):CVE-2017-8114
Platform(s):Ubuntu 16.04 LTS
Product(s):
Definition Synopsis
  • Ubuntu 16.04 LTS (xenial) is installed.
  • AND The 'roundcube' package in xenial is affected and needs fixing.
    • BACK