Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Zarafa WebAccess 4.1 and WebApp uses world-readable permissions for the files in their tmp directory, which allows local users to obtain sensitive information by reading temporary session data.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Zarafa WebAccess和WebApp 信息泄露漏洞
Vulnerability Description
Zarafa是荷兰Zarafa公司的一套商业性协作式软件解决方案，该方案提供了Email和Webmail服务、地址簿和日历等功能。WebAccess和WebApp都是其中的应用软件。 Zarafa WebAccess 4.1版本和WebApp中存在安全漏洞，该漏洞源于/var/lib/zarafa-webaccess/tmp/和/var/lib/zarafa-webapp/tmp/目录中设置了全局可读权限。本地攻击者可通过读取临时会话数据利用该漏洞获取敏感信息。
CVSS Information
N/A
Vulnerability Type
N/A