CVE-2017-15235: High severity horde groupware webmail edition vulnerability
The File Manager (gollem) module 3.0.11 in Horde Groupware 5.2.21 allows remote attackers to bypass Horde authentication for file downloads via a crafted fn parameter that corresponds to the exact filename.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-15235?
CVE-2017-15235 is considered a medium severity vulnerability that allows remote attackers to bypass authentication.
How do I fix CVE-2017-15235?
To fix CVE-2017-15235, it is recommended to update the Horde Groupware to a patched version that addresses this vulnerability.
What types of attacks can exploit CVE-2017-15235?
CVE-2017-15235 can be exploited by remote attackers who craft specific requests to download files without proper authentication.
Which software versions are affected by CVE-2017-15235?
CVE-2017-15235 affects Horde Groupware version 5.2.21 specifically.
Is CVE-2017-15235 easy to exploit?
CVE-2017-15235 can be considered relatively easy to exploit due to the requirement of a crafted 'fn' parameter.