CVE-2014-0103

Published: Jul 29, 2014Modified: May 6, 2026

2.1

Vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 3.9 / Impact: 2.9

Source: NVD

Description

WebAccess in Zarafa before 7.1.10 and WebApp before 1.6 stores credentials in cleartext, which allows local Apache users to obtain sensitive information by reading the PHP session files.

Affected (24)

Products: Fedoraproject: Fedora · Zarafa: Webapp, Zarafa

1 product

2 products

Configuration A

24 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 19
Fedoraproject Fedora	Version 20
Zarafa Webapp	Up to 1.5
Zarafa Zarafa	Up to 7.1.9
Zarafa Zarafa	Version 7.0.10
Zarafa Zarafa	Version 7.0.11
Zarafa Zarafa	Version 7.0.12
Zarafa Zarafa	Version 7.0.13
Zarafa Zarafa	Version 7.0.1
Zarafa Zarafa	Version 7.0.2
Zarafa Zarafa	Version 7.0.3
Zarafa Zarafa	Version 7.0.4
Zarafa Zarafa	Version 7.0.5
Zarafa Zarafa	Version 7.0.6
Zarafa Zarafa	Version 7.0.7
Zarafa Zarafa	Version 7.0.8
Zarafa Zarafa	Version 7.0.9
Zarafa Zarafa	Version 7.0
Zarafa Zarafa	Version 7.1.0
Zarafa Zarafa	Version 7.1.1
Zarafa Zarafa	Version 7.1.2
Zarafa Zarafa	Version 7.1.3
Zarafa Zarafa	Version 7.1.4
Zarafa Zarafa	Version 7.1.8