CVE-2022-45935 - Usage of temporary files with insecure permissions by the Apache James server allows an attacker wit

CVE-2022-45935

Summary

Usage of temporary files with insecure permissions by the Apache James server allows an attacker with local access to access private user data in transit. Vulnerable components includes the SMTP stack and IMAP APPEND command. This issue affects Apache James server version 3.7.2 and prior versions.

References

https://lists.apache.org/thread/j61fo8xc1rxtofrn8vc33whx35s9cj1d

Vulnerable Configurations

cpe:2.3:a:apache:james:-:*:*:*:*:*:*:*
cpe:2.3:a:apache:james:-:*:*:*:*:*:*:*
cpe:2.3:a:apache:james:2.2.0:*:*:*:*:*:*:*
cpe:2.3:a:apache:james:2.2.0:*:*:*:*:*:*:*
cpe:2.3:a:apache:james:3.3.0:*:*:*:*:*:*:*
cpe:2.3:a:apache:james:3.3.0:*:*:*:*:*:*:*
cpe:2.3:a:apache:james:3.4.0:*:*:*:*:*:*:*
cpe:2.3:a:apache:james:3.4.0:*:*:*:*:*:*:*
cpe:2.3:a:apache:james:3.6.1:*:*:*:*:*:*:*
cpe:2.3:a:apache:james:3.6.1:*:*:*:*:*:*:*
cpe:2.3:a:apache:james:3.6.2:*:*:*:*:*:*:*
cpe:2.3:a:apache:james:3.6.2:*:*:*:*:*:*:*
cpe:2.3:a:apache:james:3.7.0:*:*:*:*:*:*:*
cpe:2.3:a:apache:james:3.7.0:*:*:*:*:*:*:*

CVSS

Base:	None
Impact:
Exploitability:

CWE

CWE-668

CAPEC

Access

Vector	Complexity	Authentication

Impact

Confidentiality	Integrity	Availability

Last major update

12-07-2023 - 11:15

Published

06-01-2023 - 10:15

Last modified

12-07-2023 - 11:15