Vulnerability Details CVE-2014-5449
Zarafa WebAccess 4.1 and WebApp uses world-readable permissions for the files in their tmp directory, which allows local users to obtain sensitive information by reading temporary session data.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 14.9%
CVSS Severity
CVSS v2 Score 2.1
References
- http://advisories.mageia.org/MGASA-2014-0380.html
- http://seclists.org/oss-sec/2014/q3/444
- http://seclists.org/oss-sec/2014/q3/445
- http://www.mandriva.com/security/advisories?name=MDVSA-2014:182
- http://www.securityfocus.com/bid/69369
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95453
- http://advisories.mageia.org/MGASA-2014-0380.html
- http://seclists.org/oss-sec/2014/q3/444
- http://seclists.org/oss-sec/2014/q3/445
- http://www.mandriva.com/security/advisories?name=MDVSA-2014:182
- http://www.securityfocus.com/bid/69369
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95453