CVE

Id
72745  
CVE No.
CVE-2014-5447  
Status
Candidate  
Description
Zarafa WebAccess 7.1.10 and WebApp 1.6 beta uses weak permissions (644) for config.php, which allows local users to obtain sensitive information by reading the PHP session files. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-0103.  
Phase
Assigned (20140825)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
685507 72745 CVE-2014-5447 MLIST:[oss-security] 20140824 CVE request: Multiple incorrect default permissions in Zarafa  View
685508 72745 CVE-2014-5447 URL:http://seclists.org/oss-sec/2014/q3/444  View
685509 72745 CVE-2014-5447 MLIST:[oss-security] 20140825 Re: CVE request: Multiple incorrect default permissions in Zarafa  View
685510 72745 CVE-2014-5447 URL:http://seclists.org/oss-sec/2014/q3/445  View
685511 72745 CVE-2014-5447 CONFIRM:http://advisories.mageia.org/MGASA-2014-0380.html  View
685512 72745 CVE-2014-5447 MANDRIVA:MDVSA-2014:182  View
685513 72745 CVE-2014-5447 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2014:182  View
685514 72745 CVE-2014-5447 BID:69362  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
15068 JVNDB-2014-003943 OpenVPN に同梱された PrivateTunnel の ptservice サービスにおける権限を取得される脆弱性 OpenVPN に同梱された PrivateTunnel の ptservice サービスには、引用符で囲まれていない Windows 検索パスにより、権限を取得される脆弱性が存在します。 CVE-2014-5455 72745 6.9 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-003943.html  View