5.5
CVSSv3

CVE-2022-45935

Published: 06/01/2023 Updated: 12/07/2023
CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8
VMScore: 0

Vulnerability Summary

Usage of temporary files with insecure permissions by the Apache James server allows an attacker with local access to access private user data in transit. Vulnerable components includes the SMTP stack and IMAP APPEND command. This issue affects Apache James server version 3.7.2 and prior versions.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

apache james

Vendor Advisories

DescriptionThe MITRE CVE dictionary describes this issue as: Usage of temporary files with insecure permissions by the Apache James server allows an attacker with local access to access private user data in transit Vulnerable components includes the SMTP stack and IMAP APPEND command This issue affects Apache James server version 372 and prior ...