SecPod SCAP Repo, a repository of SCAP Content (CVE, CCE, CPE, CWE, OVAL and XCCDF)

Download | Alert*

CVE

CVE-2014-5448

Zarafa 5.00 uses world-readable permissions for the files in the log directory, which allows local users to obtain sensitive information by reading the log files.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 2.1
Exploit Score: 3.9
Impact Score: 2.9

CVSS V2 Metrics:
Access Vector: LOCAL
Access Complexity: LOW
Authentication: NONE
Confidentiality: PARTIAL
Integrity: NONE
Availability: NONE

Reference:

BID-69365

MDVSA-2014:182

http://seclists.org/oss-sec/2014/q3/444

http://seclists.org/oss-sec/2014/q3/445

http://advisories.mageia.org/MGASA-2014-0380.html

zarafa-logzarafa-info-disc(95452)


30479



423868



248364



909



195388



282