Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-v6vp-62vc-84qw

Опубликовано: 06 янв. 2023
Источник: github
Github: Прошло ревью
CVSS3: 5.5

Описание

Apache James server allows an attacker with local access to access private user data in transit

Usage of temporary files with insecure permissions by the Apache James server allows an attacker with local access to access private user data in transit. Vulnerable components includes the SMTP stack and IMAP APPEND command. This issue affects Apache James server version 3.7.2 and prior versions.

Пакеты

Наименование

org.apache.james:james-server

maven
Затронутые версииВерсия исправления

<= 3.7.2

Отсутствует

EPSS

Процентиль: 32%
0.00125
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-200
CWE-319
CWE-668

Связанные уязвимости

CVSS3: 5.5
redhat
около 3 лет назад

Usage of temporary files with insecure permissions by the Apache James server allows an attacker with local access to access private user data in transit. Vulnerable components includes the SMTP stack and IMAP APPEND command. This issue affects Apache James server version 3.7.2 and prior versions.

CVSS3: 5.5
nvd
около 3 лет назад

Usage of temporary files with insecure permissions by the Apache James server allows an attacker with local access to access private user data in transit. Vulnerable components includes the SMTP stack and IMAP APPEND command. This issue affects Apache James server version 3.7.2 and prior versions.

EPSS

Процентиль: 32%
0.00125
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-200
CWE-319
CWE-668