Apache James 信息泄露漏洞

Apache James is an open source Smtp and Pop3 mail transfer agent and Nntp news server written entirely in Java from the Apache Foundation in the U.S. An authorization issue vulnerability exists in Apache James, which stems from a vulnerability in the MIME4J TempFileStorageProvider using improperl...

PT-2023-14754 · Apache · Mime4J

Name of the Vulnerable Software and Affected Versions: Apache James MIME4J versions prior to 0.8.9 Description: Unproper laxist permissions on the temporary files used by MIME4J TempFileStorageProvider may lead to information disclosure to other local users. Recommendations: For Apache James MIME...