Description
Zarafa Collaboration Platform 4.1 uses world-readable permissions for /etc/zarafa/license, which allows local users to obtain sensitive information by reading license files.
References
- FEDORA-2014-9754 vendor-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1133439
- FEDORA-2014-9768 vendor-advisory
- [oss-security] 20140825 Re: CVE request: Multiple incorrect default permissions in Zarafa mailing-list
- 69370 vdb-entry
- zarafa-license-info-disc(95454) vdb-entry