CVE-2022-45787

🗓️ 06 Jan 2023 09:31:40Reported by apacheType

Unproper laxist permissions on temporary files by MIME4J TempFileStorageProvider

Reporter	Title	Published	Views	Family All 79
IBM Security Bulletins	Security Bulletin: Data Replication on Cloud Pak for Data vulnerabile to Apache James MIME4J vulnerability	8 Nov 202312:47	–	ibm
IBM Security Bulletins	Security Bulletin: vulnerability in Apache James MIME4J (CVE-2022-45787) may affect TXSeries for Multiplatforms	10 Mar 202316:20	–	ibm
IBM Security Bulletins	Security Bulletin: IBM WebSphere Application Server Liberty, which is bundled with IBM WebSphere Hybrid Edition, is vulnerable to information disclosure due to Apache James MIME4J (CVE-2022-45787)	20 Feb 202315:01	–	ibm
IBM Security Bulletins	Security Bulletin: IBM PowerVM Novalink is vulnerable because Apache James MIME4J could allow a local authenticated attacker to obtain sensitive information, caused by improper laxist permissions on the temporary files. (CVE-2022-45787)	5 May 202313:19	–	ibm
IBM Security Bulletins	Security Bulletin: IBM WebSphere Application Server Liberty is vulnerable to information disclosure due to Apache James MIME4J (CVE-2022-45787)	8 Feb 202316:15	–	ibm
IBM Security Bulletins	Security Bulletin: Rational Performance Tester contains a vulnerability which could effect its use of the MIME4J library	15 Dec 202515:38	–	ibm
IBM Security Bulletins	Security Bulletin: IBM i Modernization Engine for Lifecycle Integration is vulnerable to multiple vulnerabilities	26 Mar 202503:54	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling B2B Integrator is affected by sensitive information exposure due to Apache James MIME4J (CVE-2022-45787)	21 Nov 202316:40	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for May 2023	26 Jun 202316:40	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Analytics is affected but not classified as vulnerable to vulnerabilities in IBM Websphere Application Server Liberty	27 Sep 202314:07	–	ibm

NVD

Vulners

Node

apache jamesRange<0.8.9mime4j

[
  {
    "defaultStatus": "unaffected",
    "product": "Apache James MIME4J",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "lessThanOrEqual": "0.8.8",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
lists	www.lists.apache.org/thread/26s8p9stl1z261c4qw15bsq03tt7t0rj

09 Apr 2025 20:15Current

6Medium risk

Vulners AI Score6

CVSS 3.15.5

EPSS0.00009

SSVC

CWE-312