Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Zarafa 5.00 uses world-readable permissions for the files in the log directory, which allows local users to obtain sensitive information by reading the log files.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Zarafa 信息泄露漏洞
Vulnerability Description
Zarafa是荷兰Zarafa公司的一套商业性协作式软件解决方案。该方案提供了Email和Webmail服务、地址簿和日历等功能，其设计目的是与微软的Office Outlook整合，替代Microsoft Exchange。 Zarafa 5.00版本中存在安全漏洞，该漏洞源于日志目录中的文件使用全局可读权限。本地攻击者可通过读取日志文件利用该漏洞获取敏感信息。
CVSS Information
N/A
Vulnerability Type
N/A