CVE-2014-5450

Published: Mar 19, 2018Modified: Nov 21, 2024

5.5

Vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

Zarafa Collaboration Platform 4.1 uses world-readable permissions for /etc/zarafa/license, which allows local users to obtain sensitive information by reading license files.

Affected (1)

Products: Zarafa: Zarafa Collaboration Platform

Zarafa

1 product

Zarafa Collaboration Platform

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Zarafa Zarafa Collaboration Platform	Version 4.1

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (12)

http://lists.fedoraproject.org/pipermail/package-announce/2014-August/137158.html

Source: cve@mitre.org

Release Notes

http://lists.fedoraproject.org/pipermail/package-announce/2014-September/137232.html

Source: cve@mitre.org

Release Notes

http://www.openwall.com/lists/oss-security/2014/08/25/1

Source: cve@mitre.org

Mailing List

http://www.securityfocus.com/bid/69370

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

https://bugzilla.redhat.com/show_bug.cgi?id=1133439

Source: cve@mitre.org

Issue Tracking

https://exchange.xforce.ibmcloud.com/vulnerabilities/95454

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://lists.fedoraproject.org/pipermail/package-announce/2014-August/137158.html