VULNERABILITY INTELLIGENCE

CVE-2014-0103

CVSS score2.1 LOW
EPSS probability0.38%
CISA KEVNot currently listed
Published2014-07-29
Last modified2026-06-17
CVSS vectorAV:L/AC:L/Au:N/C:P/I:N/A:N

Description

WebAccess in Zarafa before 7.1.10 and WebApp before 1.6 stores credentials in cleartext, which allows local Apache users to obtain sensitive information by reading the PHP session files.

Primary references