CVE-2014-5450: Infoleak
Published Mar 19, 2018
·Updated
Zarafa Collaboration Platform 4.1 uses world-readable permissions for /etc/zarafa/license, which allows local users to obtain sensitive information by reading license files.
Affected Software
1 affected component
Zarafa Zarafa Collaboration Platform=4.1
Event History
Mar 19, 2018
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-5450?
CVE-2014-5450 is considered a moderate severity vulnerability due to the exposure of sensitive information.
2
How do I fix CVE-2014-5450?
To fix CVE-2014-5450, change the permissions of the /etc/zarafa/license file to restrict access.
3
What information can be exposed due to CVE-2014-5450?
CVE-2014-5450 allows local users to read sensitive license information stored in the zarafa license file.
4
Which software is affected by CVE-2014-5450?
CVE-2014-5450 specifically affects Zarafa Collaboration Platform version 4.1.
5
Can CVE-2014-5450 be exploited remotely?
No, CVE-2014-5450 requires local access to exploit the vulnerability.