The vulnerability of the zarafa-autorespond application, which is part of the Zarafa Collaboration Platform, allows a perpetrator to increase their privileges.

The vulnerability of the zarafa-autorespond application, which is part of the Zarafa Collaboration Platform, is related to incorrect definition of links before accessing a file. Exploiting this vulnerability can allow an attacker, operating locally, to increase their privileges by manipulating...

Zarafa Collaboration Platform zarafa-autorespond Privilege Gain Vulnerability

Zarafa Collaboration Platform ZCP is a suite of open source email and calendar software from Zarafa, Netherlands. A security vulnerability exists in zarafa-autorespond in versions of ZCP prior to 7.2.1. A local attacker can exploit this vulnerability to gain privileges by performing a symbolic li...