CVEvulnerability

CVE-2024-46462

7.8 HIGH Published 2024-11-15 Modified 2026-06-17 Official page ↗
Status
Deferred
Published
2024-11-15
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
7.8 HIGH — CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:H
Weaknesses
CWE-276

Description

By default, dedicated folders of ZEDMAIL for Windows up to 2024.3 can be accessed by other users to misuse technical files and make them perform tasks with higher privileges. Configuration of ZEDMAIL has to be modified to prevent this vulnerability.

Related

Weakness · CWE (1)

  • CWE-276 Incorrect Default Permissions weakness

References