Usage of temporary files with insecure permissions by the Apache James server allows an attacker with local access to access private user data in transit.
Vulnerable components includes the SMTP stack and IMAP APPEND command.
This issue affects Apache James server version 3.7.2 and prior versions.
References
| Link | Resource |
|---|---|
| https://lists.apache.org/thread/j61fo8xc1rxtofrn8vc33whx35s9cj1d | Mailing List Vendor Advisory |
Configurations
History
12 Jul 2023, 11:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | Usage of temporary files with insecure permissions by the Apache James server allows an attacker with local access to access private user data in transit. Vulnerable components includes the SMTP stack and IMAP APPEND command. This issue affects Apache James server version 3.7.2 and prior versions. |
07 Jul 2023, 19:03
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-668 |
12 Jan 2023, 14:40
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) https://lists.apache.org/thread/j61fo8xc1rxtofrn8vc33whx35s9cj1d - Mailing List, Vendor Advisory | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.5 |
| First Time |
Apache james
Apache |
|
| CPE | cpe:2.3:a:apache:james:*:*:*:*:*:*:*:* | |
| CWE | CWE-319 |
06 Jan 2023, 10:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-01-06 10:15
Updated : 2023-12-10 14:48
NVD link : CVE-2022-45935
Mitre link : CVE-2022-45935
CVE.ORG link : CVE-2022-45935
JSON object : View
Products Affected
apache
- james
CWE
CWE-668
Exposure of Resource to Wrong Sphere