CVE-2022-28218

An issue was discovered in CipherMail Webmail Messenger 1.1.1 through 4.1.4

published April 26, 2022

CVSS
—
EPSS
0%
Percentile
15.4
In the wild
Unconfirmed
What it is

An issue was discovered in CipherMail Webmail Messenger 1.1.1 through 4.1.4. A local attacker could access secret keys (found in a Roundcube configuration file) that are used to protect Webmail user passwords and two-factor authentication (2FA).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00250 · 15.4th percentile
Published
2022-04-26T17:49Z
EPSS history
Timeline
  • 26 APR 17:49Z
    An issue was discovered in CipherMail Webmail Messenger 1.1.1 through 4.1.4
    cvelistv5