Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2014-0103

WebAccess in Zarafa before 7.1.10 and WebApp before 1.6 stores credentials in cleartext, which allows local Apache users to obtain sensitive information by reading the PHP session files.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed
Vendors
Fedoraproject Zarafa
Products
Fedora Webapp Zarafa
CVE-2014-5447

Zarafa WebAccess 7.1.10 and WebApp 1.6 beta uses weak permissions (644) for config.php, which allows local users to obtain sensitive information by reading the PHP session files. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-0103.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed
Vendors
Zarafa
Products
Webapp Zarafa
CVE-2014-5449

Zarafa WebAccess 4.1 and WebApp uses world-readable permissions for the files in their tmp directory, which allows local users to obtain sensitive information by reading temporary session data.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed
Vendors
Zarafa
Products
Webaccess Webapp
CVE-2014-9465

senddocument.php in Zarafa WebApp before 2.0 beta 3 and WebAccess in Zarafa Collaboration Platform (ZCP) 7.x before 7.1.12 beta 1 and 7.2.x before 7.2.0 beta 1 allows remote attackers to cause a denial of service (/tmp disk consumption) by uploading a large number of files.

CVSS 2.0 · 5.0 Medium EPSS 3.4% KEV · Not listed
Vendors
Fedoraproject Zarafa
Products
Fedora Webapp Zarafa Collaboration Platform