Vulnerability Details : CVE-2017-16651

Public exploit exists!
Roundcube Webmail before 1.1.10, 1.2.x before 1.2.7, and 1.3.x before 1.3.3 allows unauthorized access to arbitrary files on the host's filesystem, including configuration files, as exploited in the wild in November 2017. The attacker must be able to authenticate at the target system with a valid username/password as the attack requires an active session. The issue is related to file-based attachment plugins and _task=settings&_action=upload-display&_from=timezone requests.
Published 2017-11-09 14:29:00
Updated 2021-03-04 21:08:55
Source MITRE
View at NVD,   CVE.org
Vulnerability category: Bypass

Products affected by CVE-2017-16651

CVE-2017-16651 is in the CISA Known Exploited Vulnerabilities Catalog

CISA vulnerability name:
Roundcube Webmail File Disclosure Vulnerability
CISA required action:
Apply updates per vendor instructions.
CISA description:
Roundcube Webmail contains a file disclosure vulnerability caused by insufficient input validation in conjunction with file-based attachment plugins, which are used by default.
Notes:
https://nvd.nist.gov/vuln/detail/CVE-2017-16651
Added on 2021-11-03 Action due date 2022-05-03

Exploit prediction scoring system (EPSS) score for CVE-2017-16651

EPSS FAQ
1.31%
Probability of exploitation activity in the next 30 days EPSS Score History
~ 86 %
Percentile, the proportion of vulnerabilities that are scored at or less

Metasploit modules for CVE-2017-16651

  • Roundcube TimeZone Authenticated File Disclosure
    Disclosure Date: 2017-11-09
    First seen: 2023-09-11
    auxiliary/gather/roundcube_auth_file_read
    Roundcube Webmail allows unauthorized access to arbitrary files on the host's filesystem, including configuration files. This affects all versions from 1.1.0 through version 1.3.2. The attacker must be able to authenticate at the target system with a valid username/pas

CVSS scores for CVE-2017-16651

Base Score Base Severity CVSS Vector Exploitability Score Impact Score Score Source First Seen
4.6
 MEDIUM AV:L/AC:L/Au:N/C:P/I:P/A:P
3.9
6.4
 NIST
7.8
 HIGH CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1.8
5.9
 NIST

CWE ids for CVE-2017-16651

References for CVE-2017-16651

Jump to
This web site uses cookies for managing your session, storing preferences, website analytics and additional purposes described in our privacy policy.
By using this web site you are agreeing to CVEdetails.com terms of use!
Accept Close