CVE-2014-0103 in Zarafa

Summary

WebAccess in Zarafa before 7.1.10 and WebApp before 1.6 stores credentials in cleartext, which allows local Apache users to obtain sensitive information by reading the PHP session files.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Reservation: 12/03/2013
• Disclosure: 07/29/2014
• Moderation: VulDB entry created
• Entries: 1: VDB-70496
• CPE: ready
• CWE: CWE-310 (Confirmed)
• CVSS: 4.0
• EPSS: 0.00075
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2014-0103
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2014-0103
• CVE Details: https://www.cvedetails.com/cve/CVE-2014-0103/