CVE-2022-45787

Published: Jan 6, 2023Modified: Jun 17, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

Unproper laxist permissions on the temporary files used by MIME4J TempFileStorageProvider may lead to information disclosure to other local users. This issue affects Apache James MIME4J version 0.8.8 and prior versions. We recommend users to upgrade to MIME4j version 0.8.9 or later.

Affected (1)

Products: Apache: James

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Apache James	Before 0.8.9

Related CWEs

Cleartext Storage of Sensitive Information

The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.

References (2)

https://lists.apache.org/thread/26s8p9stl1z261c4qw15bsq03tt7t0rj

Source: security@apache.org

Mailing ListVendor Advisory

https://lists.apache.org/thread/26s8p9stl1z261c4qw15bsq03tt7t0rj

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListVendor Advisory

Timeline

No history available yet.