Unscored CVE-2014-5448 EUVD-2014-5335GHSA-63gp-qr86-84fq

Zarafa 5.00 uses world-readable permissions for the files in the log directory, which allows local users to obtain sensitive information by…

Published Oct 20, 2014 · Updated Aug 6, 2024 · Assigned by mitre

Description

Zarafa 5.00 uses world-readable permissions for the files in the log directory, which allows local users to obtain sensitive information by reading the log files.

References

69365 vdb-entry
[oss-security] 20140824 CVE request: Multiple incorrect default permissions in Zarafa mailing-list
http://advisories.mageia.org/MGASA-2014-0380.html
zarafa-logzarafa-info-disc(95452) vdb-entry
MDVSA-2014:182 vendor-advisory
[oss-security] 20140825 Re: CVE request: Multiple incorrect default permissions in Zarafa mailing-list