2023-04-24 12:24:31 +02:00
{
"id" : "CVE-2014-0103" ,
"sourceIdentifier" : "secalert@redhat.com" ,
"published" : "2014-07-29T14:55:04.640" ,
2024-12-08 03:06:42 +00:00
"lastModified" : "2024-11-21T02:01:22.433" ,
"vulnStatus" : "Modified" ,
2024-07-14 02:06:08 +00:00
"cveTags" : [ ] ,
2023-04-24 12:24:31 +02:00
"descriptions" : [
{
"lang" : "en" ,
"value" : "WebAccess in Zarafa before 7.1.10 and WebApp before 1.6 stores credentials in cleartext, which allows local Apache users to obtain sensitive information by reading the PHP session files."
} ,
{
"lang" : "es" ,
"value" : "WebAccess en Zarafa anterior a 7.1.10 y WebApp anterior a 1.6 almacena las credenciales en texto claro, lo que permite a usuarios locales de Apache obtener informaci\u00f3n sensible mediante la lectura de los ficheros PHP de sesi\u00f3n."
}
] ,
"metrics" : {
"cvssMetricV2" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "2.0" ,
"vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N" ,
2024-12-08 03:06:42 +00:00
"baseScore" : 2.1 ,
2023-04-24 12:24:31 +02:00
"accessVector" : "LOCAL" ,
"accessComplexity" : "LOW" ,
"authentication" : "NONE" ,
"confidentialityImpact" : "PARTIAL" ,
"integrityImpact" : "NONE" ,
2024-12-08 03:06:42 +00:00
"availabilityImpact" : "NONE"
2023-04-24 12:24:31 +02:00
} ,
"baseSeverity" : "LOW" ,
"exploitabilityScore" : 3.9 ,
"impactScore" : 2.9 ,
"acInsufInfo" : false ,
"obtainAllPrivilege" : false ,
"obtainUserPrivilege" : false ,
"obtainOtherPrivilege" : false ,
"userInteractionRequired" : false
}
]
} ,
"weaknesses" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"description" : [
{
"lang" : "en" ,
"value" : "CWE-310"
}
]
}
] ,
"configurations" : [
{
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zarafa:webapp:*:*:*:*:*:*:*:*" ,
"versionEndIncluding" : "1.5" ,
"matchCriteriaId" : "7A4B27EE-B02D-421B-BD95-F2DB5C018D6D"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zarafa:zarafa:*:*:*:*:*:*:*:*" ,
"versionEndIncluding" : "7.1.9" ,
"matchCriteriaId" : "28C5C692-39F1-4E64-9190-889384405F90"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zarafa:zarafa:7.0:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "ED156852-536D-4F1E-A0F6-AE56A3761B31"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zarafa:zarafa:7.0.1:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "BB87FEAC-53F9-408A-ACC1-8E158C969D10"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zarafa:zarafa:7.0.2:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "6B3295CA-1249-486D-B8B5-BA8D3E51208E"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zarafa:zarafa:7.0.3:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "20351915-0737-4116-A5FC-1A599CF4B58F"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zarafa:zarafa:7.0.4:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "ED8C5B3B-1A70-4C55-8883-C76B4E8B06E1"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zarafa:zarafa:7.0.5:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "49114244-F5F6-4170-A774-C4464910C235"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zarafa:zarafa:7.0.6:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "CA8AC6BF-966E-4E2C-816C-8E0408371FB3"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zarafa:zarafa:7.0.7:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "83BBD25D-D9D3-4AEC-BCBD-AF71B1E83306"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zarafa:zarafa:7.0.8:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "B8B82DCF-DBB2-4123-BC2C-CADA57D7BB5F"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zarafa:zarafa:7.0.9:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "B9593342-5727-4321-A3D1-106B53807F22"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zarafa:zarafa:7.0.10:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "169C423D-EC0F-4515-9D9F-5C836D317818"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zarafa:zarafa:7.0.11:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "5918BF47-F84B-44AA-AC6F-2B6ABBDAF559"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zarafa:zarafa:7.0.12:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "F9F7FACD-C812-44E7-AD6E-BDE0D7935C90"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zarafa:zarafa:7.0.13:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "562E0822-7D69-4CA0-BF45-90431B902C19"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zarafa:zarafa:7.1.0:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "1CC4BF34-15BE-4ECE-B4F8-A0F89CEC134D"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zarafa:zarafa:7.1.1:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "B616E103-E23C-472A-BF01-B135C7C9A91D"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zarafa:zarafa:7.1.2:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "FC44763E-0B6F-4F85-BFF4-443F8E8C1DB0"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zarafa:zarafa:7.1.3:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "31107633-C2C7-45C6-AD29-C201FB9C91CC"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zarafa:zarafa:7.1.4:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "4E3B86A7-D99C-48D1-83A6-74C1B03C51A2"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zarafa:zarafa:7.1.8:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "AF0735C7-4626-40F9-BD84-970C120FFA09"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:fedoraproject:fedora:19:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "5991814D-CA77-4C25-90D2-DB542B17E0AD"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:fedoraproject:fedora:20:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "FF47C9F0-D8DA-4B55-89EB-9B2C9383ADB9"
}
]
}
]
}
] ,
"references" : [
{
"url" : "http://advisories.mageia.org/MGASA-2014-0380.html" ,
"source" : "secalert@redhat.com"
} ,
{
"url" : "http://lists.fedoraproject.org/pipermail/package-announce/2014-July/136033.html" ,
"source" : "secalert@redhat.com"
} ,
{
"url" : "http://lists.fedoraproject.org/pipermail/package-announce/2014-July/136044.html" ,
"source" : "secalert@redhat.com"
} ,
{
"url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2014:182" ,
"source" : "secalert@redhat.com"
} ,
{
"url" : "http://www.securityfocus.com/bid/68247" ,
"source" : "secalert@redhat.com"
} ,
{
"url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1073618" ,
"source" : "secalert@redhat.com"
2024-12-08 03:06:42 +00:00
} ,
{
"url" : "http://advisories.mageia.org/MGASA-2014-0380.html" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
} ,
{
"url" : "http://lists.fedoraproject.org/pipermail/package-announce/2014-July/136033.html" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
} ,
{
"url" : "http://lists.fedoraproject.org/pipermail/package-announce/2014-July/136044.html" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
} ,
{
"url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2014:182" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
} ,
{
"url" : "http://www.securityfocus.com/bid/68247" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
} ,
{
"url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1073618" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
2023-04-24 12:24:31 +02:00
}
]
}
