CVE-2014-5447

Zarafa WebAccess 7.1.10 and WebApp 1.6 beta uses weak permissions (644) for config.php, which allows local users to obtain sensitive information by reading the…

published October 20, 2014

CVSS
—
EPSS
0%
Percentile
29.5
In the wild
Unconfirmed
What it is

Zarafa WebAccess 7.1.10 and WebApp 1.6 beta uses weak permissions (644) for config.php, which allows local users to obtain sensitive information by reading the PHP session files. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-0103.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00370 · 29.5th percentile
Published
2014-10-20T15:00Z
EPSS history
Timeline
  • 20 OCT 15:00Z
    Zarafa WebAccess 7.1.10 and WebApp 1.6 beta uses weak permissions (644) for config.php, which allows local users to obtain sensitive information by reading the…
    cvelistv5