CVE-2014-5448 Zarafa 5.00 uses world-readable permissions for the files in the log directory, which allows local users to obtain sensitive information by reading the log files.
LowCVSS 2.1
EPSS 0.37%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Zarafa 5.00 uses world-readable permissions for the files in the log directory, which allows local users to obtain sensitive information by reading the log files.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| zarafa | = 5.00 | No fix listed |
References
- advisories.mageia.org
- [oss-security] 20140824 CVE request: Multiple incorrect default permissions in Zarafa mailing-list
- [oss-security] 20140825 Re: CVE request: Multiple incorrect default permissions in Zarafa mailing-list
- MDVSA-2014:182 vendor-advisory
- 69365 vdb-entry
- zarafa-logzarafa-info-disc(95452) vdb-entry