5.6 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
47.3%
WebAccess in Zarafa before 7.1.10 and WebApp before 1.6 stores credentials in cleartext, which allows local Apache users to obtain sensitive information by reading the PHP session files.