Horde webmail multiple vulnerabilities

nickgr67

• March 17, 2020 03:06

Hello Is there any timeline to update? We have temporarily disabled horde in our servers

• 

  cPanelLauren

  • March 17, 2020 17:47

  Hello, 1. The link you provided was dead, it looks like it redirects to https but they are having an issue with SSL right now. 2. Please do not add 3rd party links of any kind here see 3. The only vulnerability I'm aware of that affected horde was CVE-2019-9858 which we patched with CPANEL-28095 which was fixed with version 82 of cPanel & WHM. You can see this referenced in the change logs here:

  0
• 

  nickgr67

  • March 18, 2020 09:23

  Sorry, i was not aware about the link restriction You can search google for "horde webmail exploit" and filter last week results It is posted an many security related web sites like packetstormsecurity and may others

  0
• 

  cPanelLauren

  • March 18, 2020 13:31

  Hello,

  You can search google for "horde webmail exploit" and filter last week results

  
  That's exactly what I did and found CVE-2019-9858 - which seemed to be the only one that was relevant and this was patched.

  0
• 

  nickgr67

  • March 20, 2020 09:19

  Hello Since links are not allowed, please see attached image It is about Horde Groupware Webmail Edition 5.2.22 , the current cpanel version, and posts are one week old

  0
• 

  cPanelLauren

  • March 20, 2020 13:43

  RIght, I too can google. But the vulnerability I found previously was ALL related to the same one, which I linked to you. There is a new one which is from 3-14 CVE-2020-8518 which has also been patched per CPANEL-31944 Next time you'vee got a question of this nature, I'd advise you to provide the ACTUAL CVE number rather than your google search.

  0

Please sign in to leave a comment.