| Package | Affected versions | Patched versions |
|---|---|---|
| webapp | ≤ 1.5 | |
| zarafa | = 7.0= 7.0.1= 7.0.10= 7.0.11= 7.0.12= 7.0.13= 7.0.2= 7.0.3= 7.0.4= 7.0.5= 7.0.6= 7.0.7= 7.0.8= 7.0.9= 7.1.0= 7.1.1= 7.1.2= 7.1.3= 7.1.4= 7.1.8≤ 7.1.9 |
WebAccess in Zarafa before 7.1.10 and WebApp before 1.6 stores credentials in cleartext, which allows local Apache users to obtain sensitive information by reading the PHP session files.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free