CVE-2014-5448: Infoleak
Published Oct 20, 2014
·Updated
Zarafa 5.00 uses world-readable permissions for the files in the log directory, which allows local users to obtain sensitive information by reading the log files.
Affected Software
1 affected component
Zarafa Zarafa=5.00
Event History
Oct 20, 2014
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-5448?
CVE-2014-5448 is considered a low to medium severity vulnerability due to its local nature and potential for information disclosure.
2
How do I fix CVE-2014-5448?
To fix CVE-2014-5448, ensure that proper file permissions are set for the log directory to restrict access to sensitive files.
3
Which version of Zarafa is affected by CVE-2014-5448?
CVE-2014-5448 specifically affects Zarafa version 5.00.
4
What type of information can be compromised due to CVE-2014-5448?
CVE-2014-5448 allows local users to read sensitive information stored in the log files.
5
Can CVE-2014-5448 be exploited remotely?
CVE-2014-5448 cannot be exploited remotely as it requires local access to the system.