Security Advisory

CVE-2014-5449

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2014-10-20 15:00:00
Last updated 2024-08-06 11:48:48
Assigner mitre
State PUBLISHED

Description

Zarafa WebAccess 4.1 and WebApp uses world-readable permissions for the files in their tmp directory, which allows local users to obtain sensitive information by reading temporary session data.