CVE-2022-45935
Assigner: apache
Published: 2023-01-06T09:33:30.150Z
State: PUBLISHED
affected: defaultStatus: unaffected
product: Apache James server
vendor: Apache Software Foundation
versions: lessThanOrEqual: 3.7.2
status: affected
version: 0
versionType: semver
credits: type: reporter
value: Benoit Tellier
descriptions: supportingMedia: base64: no
type: text/html
value: Usage of temporary files with insecure permissions by the Apache James server allows an attacker with local access to access private user data in transit. <br><br>Vulnerable components includes the SMTP stack and IMAP APPEND command.<br><br>This issue affects Apache James server version 3.7.2 and prior versions.
value: Usage of temporary files with insecure permissions by the Apache James server allows an attacker with local access to access private user data in transit. 

Vulnerable components includes the SMTP stack and IMAP APPEND command.

This issue affects Apache James server version 3.7.2 and prior versions.
metrics: other: content: text: low
type: Textual description of severity
problemTypes: descriptions: cweId: CWE-668
description: CWE-668 Exposure of Resource to Wrong Sphere
type: CWE
source: discovery: UNKNOWN
title: Apache James server: Temporary File Information Disclosure
x_generator: engine: Vulnogram 0.1.0-dev