CVE-2014-5443: High severity seafile server vulnerability
Published Mar 19, 2018
·Updated
Seafile Server before 3.1.2 and Server Professional Edition before 3.1.0 allow local users to gain privileges via vectors related to ccnet handling user accounts.
Affected Software
2 affected components
Seafile Seafile Server<3.1.2
Seafile Seafile Server<3.1.0
Event History
Mar 19, 2018
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Frequently Asked Questions
1
What is CVE-2014-5443?
CVE-2014-5443 is a vulnerability in Seafile Server before version 3.1.2 and Server Professional Edition before version 3.1.0 that allows local users to gain privileges.
2
How can local users exploit CVE-2014-5443?
Local users can exploit CVE-2014-5443 by manipulating ccnet to gain privileges.
3
What is the severity of CVE-2014-5443?
CVE-2014-5443 has a severity rating of 7.8 (high).
4
Which software versions are affected by CVE-2014-5443?
Seafile Server versions up to 3.1.2 and Server Professional Edition versions up to 3.1.0 are affected by CVE-2014-5443.
5
How can I fix CVE-2014-5443?
To fix CVE-2014-5443, upgrade to Seafile Server version 3.1.2 or Server Professional Edition version 3.1.0 or later.