CVE-2022-45935CWE-668

Apache James server: Temporary File Information Disclosure

Medium · published January 6, 2023

CVSS v3.1
5.5
EPSS
0%
Percentile
29.7
In the wild
Unconfirmed
What it is

Usage of temporary files with insecure permissions by the Apache James server allows an attacker with local access to access private user data in transit.

Vulnerable components includes the SMTP stack and IMAP APPEND command.

This issue affects Apache James server version 3.7.2 and prior versions.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00370 · 29.7th percentile
Weakness
CWE-668 · Exposure of Resource to Wrong Sphere
Published
2023-01-06T09:33Z
EPSS history
Timeline
  • 06 JAN 09:33Z
    Apache James server: Temporary File Information Disclosure
    cvelistv5