SOGo Arbitrary User Information Disclosure

2004-11-30T04:45:41
ID OSVDB:14675
Type osvdb
Reporter OSVDB
Modified 2004-11-30T04:45:41

Description

Vulnerability Description

Scalable OGo (SOGo) contains a flaw that may lead to an unauthorized information disclosure. The issue is triggered due to insecure permissions, which will disclose sensitive information resulting in a loss of confidentiality.

Solution Description

Currently, there are no known upgrades, patches, or workarounds available to correct this issue.

Short Description

Scalable OGo (SOGo) contains a flaw that may lead to an unauthorized information disclosure. The issue is triggered due to insecure permissions, which will disclose sensitive information resulting in a loss of confidentiality.

References:

Vendor URL: http://www.opengroupware.org/ Vendor Specific News/Changelog Entry: http://bugzilla.opengroupware.org/bugzilla/show_bug.cgi?id=1060 Security Tracker: 1013553 ISS X-Force ID: 19820 CVE-2004-1771