Unscored CVE-2014-5449 EUVD-2014-5336GHSA-jc9x-3ccm-v3m6

Zarafa WebAccess 4.1 and WebApp uses world-readable permissions for the files in their tmp directory, which allows local users to obtain se…

Published Oct 20, 2014 · Updated Aug 6, 2024 · Assigned by mitre

Description

Zarafa WebAccess 4.1 and WebApp uses world-readable permissions for the files in their tmp directory, which allows local users to obtain sensitive information by reading temporary session data.

References

[oss-security] 20140824 CVE request: Multiple incorrect default permissions in Zarafa mailing-list
webaccess-webapp-information-disc(95453) vdb-entry
http://advisories.mageia.org/MGASA-2014-0380.html
69369 vdb-entry
MDVSA-2014:182 vendor-advisory
[oss-security] 20140825 Re: CVE request: Multiple incorrect default permissions in Zarafa mailing-list