CVE-2019-12938

The Roundcube component of Analogic Poste.io 2.1.6 uses .htaccess to protect the logs/ folder, which is effective with the Apache HTTP Server but is…

published June 24, 2019

CVSS
—
EPSS
1%
Percentile
62.1
In the wild
Unconfirmed
What it is

The Roundcube component of Analogic Poste.io 2.1.6 uses .htaccess to protect the logs/ folder, which is effective with the Apache HTTP Server but is ineffective with nginx. Attackers can read logs via the webmail/logs/sendmail URI.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00988 · 62.1th percentile
Published
2019-06-24T13:07Z
EPSS history
Timeline
  • 24 JUN 13:07Z
    The Roundcube component of Analogic Poste.io 2.1.6 uses .htaccess to protect the logs/ folder, which is effective with the Apache HTTP Server but is…
    cvelistv5