YunoHost-Apps / roundcube_ynh

Roundcube package for YunoHost
https://roundcube.net/
GNU Affero General Public License v3.0
11 stars 22 forks source link

[SECURITY] Roundcube DB password is readable by all users #110

Closed Jules-Bertholet closed 2 years ago

Jules-Bertholet commented 3 years ago

The Roundcube DB password is in $final_path/roundcube/config/config.inc.php, which all users can read.