ByteOS Network

Vulnerability Details :

CVE-2016-4069

Assigner-debian

Assigner Org ID-79363d38-fa19-49d1-9214-5f28da3f3ac5

Published At-25 Aug, 2016 | 18:00

Updated At-06 Aug, 2024 | 00:17

Cross-site request forgery (CSRF) vulnerability in Roundcube Webmail before 1.1.5 allows remote attackers to hijack the authentication of users for requests that download attachments and cause a denial of service (disk consumption) via unspecified vectors.

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

▼Common Vulnerabilities and Exposures (CVE)

cve.org

Assigner:debian

Assigner Org ID:79363d38-fa19-49d1-9214-5f28da3f3ac5

Published At:25 Aug, 2016 | 18:00

Updated At:06 Aug, 2024 | 00:17

▼CVE Numbering Authority (CNA)

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
http://www.securityfocus.com/bid/92654	vdb-entry x_refsource_BID
https://github.com/roundcube/roundcubemail/wiki/Changelog#release-115	x_refsource_CONFIRM
https://github.com/roundcube/roundcubemail/issues/4957	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-updates/2016-08/msg00079.html	vendor-advisory x_refsource_SUSE
http://www.openwall.com/lists/oss-security/2016/04/23/4	mailing-list x_refsource_MLIST
https://github.com/roundcube/roundcubemail/commit/4a408843b0ef816daf70a472a02b78cd6073a4d5	x_refsource_CONFIRM
https://github.com/roundcube/roundcubemail/commit/699af1e5206ed9114322adaa3c25c1c969640a53	x_refsource_CONFIRM
https://github.com/roundcube/roundcubemail/releases/tag/1.1.5	x_refsource_CONFIRM

Hyperlink: http://www.securityfocus.com/bid/92654

Resource:

vdb-entry

x_refsource_BID

Hyperlink: https://github.com/roundcube/roundcubemail/wiki/Changelog#release-115

Resource:

x_refsource_CONFIRM

Hyperlink: https://github.com/roundcube/roundcubemail/issues/4957

Resource:

x_refsource_CONFIRM

Hyperlink: http://lists.opensuse.org/opensuse-updates/2016-08/msg00079.html

Resource:

vendor-advisory

x_refsource_SUSE

Hyperlink: http://www.openwall.com/lists/oss-security/2016/04/23/4

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: https://github.com/roundcube/roundcubemail/commit/4a408843b0ef816daf70a472a02b78cd6073a4d5

Resource:

x_refsource_CONFIRM

Hyperlink: https://github.com/roundcube/roundcubemail/commit/699af1e5206ed9114322adaa3c25c1c969640a53

Resource:

x_refsource_CONFIRM

Hyperlink: https://github.com/roundcube/roundcubemail/releases/tag/1.1.5

Resource:

x_refsource_CONFIRM

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://www.securityfocus.com/bid/92654	vdb-entry x_refsource_BID x_transferred
https://github.com/roundcube/roundcubemail/wiki/Changelog#release-115	x_refsource_CONFIRM x_transferred
https://github.com/roundcube/roundcubemail/issues/4957	x_refsource_CONFIRM x_transferred
http://lists.opensuse.org/opensuse-updates/2016-08/msg00079.html	vendor-advisory x_refsource_SUSE x_transferred
http://www.openwall.com/lists/oss-security/2016/04/23/4	mailing-list x_refsource_MLIST x_transferred
https://github.com/roundcube/roundcubemail/commit/4a408843b0ef816daf70a472a02b78cd6073a4d5	x_refsource_CONFIRM x_transferred
https://github.com/roundcube/roundcubemail/commit/699af1e5206ed9114322adaa3c25c1c969640a53	x_refsource_CONFIRM x_transferred
https://github.com/roundcube/roundcubemail/releases/tag/1.1.5	x_refsource_CONFIRM x_transferred

Hyperlink: http://www.securityfocus.com/bid/92654

Resource:

vdb-entry

x_refsource_BID

x_transferred

Hyperlink: https://github.com/roundcube/roundcubemail/wiki/Changelog#release-115

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: https://github.com/roundcube/roundcubemail/issues/4957

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://lists.opensuse.org/opensuse-updates/2016-08/msg00079.html

Resource:

vendor-advisory

x_refsource_SUSE

x_transferred

Hyperlink: http://www.openwall.com/lists/oss-security/2016/04/23/4

Resource:

mailing-list

x_refsource_MLIST

x_transferred

Hyperlink: https://github.com/roundcube/roundcubemail/commit/4a408843b0ef816daf70a472a02b78cd6073a4d5

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: https://github.com/roundcube/roundcubemail/commit/699af1e5206ed9114322adaa3c25c1c969640a53

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: https://github.com/roundcube/roundcubemail/releases/tag/1.1.5

Resource:

x_refsource_CONFIRM

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:security@debian.org

Published At:25 Aug, 2016 | 18:59

Updated At:12 Apr, 2025 | 10:46

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.0	8.8	HIGH	CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Primary	2.0	6.8	MEDIUM	AV:N/AC:M/Au:N/C:P/I:P/A:P

Type: Primary

Version: 3.0

Base score: 8.8

Base severity: HIGH

Vector:

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Type: Primary

Version: 2.0

Base score: 6.8

Base severity: MEDIUM

Vector:

AV:N/AC:M/Au:N/C:P/I:P/A:P

CPE Matches

openSUSE

>>leap>>42.1

cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*

Roundcube Webmail Project

>>webmail>>Versions up to 1.1.4(inclusive)

cpe:2.3:a:roundcube:webmail:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-352	Primary	nvd@nist.gov

CWE ID: CWE-352

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://lists.opensuse.org/opensuse-updates/2016-08/msg00079.html	security@debian.org	Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/04/23/4	security@debian.org	Mailing List Third Party Advisory
http://www.securityfocus.com/bid/92654	security@debian.org	N/A
https://github.com/roundcube/roundcubemail/commit/4a408843b0ef816daf70a472a02b78cd6073a4d5	security@debian.org	Issue Tracking Patch
https://github.com/roundcube/roundcubemail/commit/699af1e5206ed9114322adaa3c25c1c969640a53	security@debian.org	Issue Tracking Patch
https://github.com/roundcube/roundcubemail/issues/4957	security@debian.org	Issue Tracking Mailing List
https://github.com/roundcube/roundcubemail/releases/tag/1.1.5	security@debian.org	Release Notes
https://github.com/roundcube/roundcubemail/wiki/Changelog#release-115	security@debian.org	Release Notes
http://lists.opensuse.org/opensuse-updates/2016-08/msg00079.html	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/04/23/4	af854a3a-2127-422b-91ae-364da2661108	Mailing List Third Party Advisory
http://www.securityfocus.com/bid/92654	af854a3a-2127-422b-91ae-364da2661108	N/A
https://github.com/roundcube/roundcubemail/commit/4a408843b0ef816daf70a472a02b78cd6073a4d5	af854a3a-2127-422b-91ae-364da2661108	Issue Tracking Patch
https://github.com/roundcube/roundcubemail/commit/699af1e5206ed9114322adaa3c25c1c969640a53	af854a3a-2127-422b-91ae-364da2661108	Issue Tracking Patch
https://github.com/roundcube/roundcubemail/issues/4957	af854a3a-2127-422b-91ae-364da2661108	Issue Tracking Mailing List
https://github.com/roundcube/roundcubemail/releases/tag/1.1.5	af854a3a-2127-422b-91ae-364da2661108	Release Notes
https://github.com/roundcube/roundcubemail/wiki/Changelog#release-115	af854a3a-2127-422b-91ae-364da2661108	Release Notes

Hyperlink: http://lists.opensuse.org/opensuse-updates/2016-08/msg00079.html

Source: security@debian.org

Resource:

Third Party Advisory

Hyperlink: http://www.openwall.com/lists/oss-security/2016/04/23/4

Source: security@debian.org

Resource:

Mailing List

Third Party Advisory

Hyperlink: http://www.securityfocus.com/bid/92654

Source: security@debian.org

Resource: N/A

Hyperlink: https://github.com/roundcube/roundcubemail/commit/4a408843b0ef816daf70a472a02b78cd6073a4d5

Source: security@debian.org

Resource:

Issue Tracking

Patch

Hyperlink: https://github.com/roundcube/roundcubemail/commit/699af1e5206ed9114322adaa3c25c1c969640a53

Source: security@debian.org

Resource:

Issue Tracking

Patch

Hyperlink: https://github.com/roundcube/roundcubemail/issues/4957

Source: security@debian.org

Resource:

Issue Tracking

Mailing List

Hyperlink: https://github.com/roundcube/roundcubemail/releases/tag/1.1.5

Source: security@debian.org

Resource:

Release Notes

Hyperlink: https://github.com/roundcube/roundcubemail/wiki/Changelog#release-115

Source: security@debian.org

Resource:

Release Notes

Hyperlink: http://lists.opensuse.org/opensuse-updates/2016-08/msg00079.html