Description
Seafile Server before 3.1.2 and Server Professional Edition before 3.1.0 allow local users to gain privileges via vectors related to ccnet handling user accounts.
References
- seafile-cve20145443-priv-esc(95458) vdb-entry
- https://manual.seafile.com/changelog/changelog-for-seafile-professional-server.html
- https://manual.seafile.com/changelog/server-changelog.html
- [oss-security] 20140824 CVE-2014-5443: Seafile local horizontal privilege escalation vulnerability mailing-list
- 69360 vdb-entry