Security Advisory
CVE-2014-5450
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Zarafa Collaboration Platform 4.1 uses world-readable permissions for /etc/zarafa/license, which allows local users to obtain sensitive information by reading license files.