Vulnerability CVE-2022-28218
Published: 2022-04-26

Description:
An issue was discovered in CipherMail Webmail Messenger 1.1.1 through 4.1.4. A local attacker could access secret keys (found in a Roundcube configuration file) that are used to protect Webmail user passwords and two-factor authentication (2FA).

 References:
https://www.ciphermail.com/webmail-release-notes.html
https://lists.ciphermail.com/hyperkitty/list/security@lists.ciphermail.com/thread/WRWHQUACXWXQA42KXXQQ6EEP6SBBM5BM/
https://ciphermail.com
Copyright 2026, cxsecurity.com

 

Back to Top