CVEvulnerability

CVE-2014-0103

2.1 LOW Published 2014-07-29 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2014-07-29
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
CWE-310

Description

WebAccess in Zarafa before 7.1.10 and WebApp before 1.6 stores credentials in cleartext, which allows local Apache users to obtain sensitive information by reading the PHP session files.

Affected configurations

• zarafa webapp (<= 1.5) • zarafa zarafa (<= 7.1.9) • zarafa zarafa 7.0 • zarafa zarafa 7.0.1 • zarafa zarafa 7.0.2 • zarafa zarafa 7.0.3 • zarafa zarafa 7.0.4 • zarafa zarafa 7.0.5 • zarafa zarafa 7.0.6 • zarafa zarafa 7.0.7 • zarafa zarafa 7.0.8 • zarafa zarafa 7.0.9 • zarafa zarafa 7.0.10 • zarafa zarafa 7.0.11 • zarafa zarafa 7.0.12 • zarafa zarafa 7.0.13 • zarafa zarafa 7.1.0 • zarafa zarafa 7.1.1 • zarafa zarafa 7.1.2 • zarafa zarafa 7.1.3 • zarafa zarafa 7.1.4 • zarafa zarafa 7.1.8 • fedoraproject fedora 19 • fedoraproject fedora 20

Related

Weakness · not in database (1)

References