CVE-2017-15235

The File Manager (gollem) module 3.0.11 in Horde Groupware 5.2.21 allows remote attackers to bypass Horde authentication for file downloads via a crafted fn…

published October 11, 2017

CVSS
—
EPSS
6%
Percentile
92.8
In the wild
Unconfirmed
What it is

The File Manager (gollem) module 3.0.11 in Horde Groupware 5.2.21 allows remote attackers to bypass Horde authentication for file downloads via a crafted fn parameter that corresponds to the exact filename.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05530 · 92.8th percentile
Published
2017-10-11T03:00Z
EPSS history
Timeline
  • 11 OCT 03:00Z
    The File Manager (gollem) module 3.0.11 in Horde Groupware 5.2.21 allows remote attackers to bypass Horde authentication for file downloads via a crafted fn…
    cvelistv5