CVE-2022-45787

CVE-2022-45787 affects Apache James MIME4J (TempFileStorageProvider) with improper laxist permissions on temporary files, potentially allowing a local authenticated attacker to disclose sensitive information to other local users. Affected versions: MIME4J 0.8.8 and earlier. Impact is information ...

CVE-2021-38542

CVE-2021-38542 concerns Apache James vulnerable to a buffering attack via STARTTLS. The core issue is in the handling of STARTTLS that could enable a MITM-related command injection and leakage of sensitive information. Multiple sources corroborate the STARTTLS-related buffering behavior and note ...

CVE-2022-45935

CVE-2022-45935 affects Apache James server (3.7.2 and earlier). The issue is insecure permissions on temporary files used by the server, enabling a local attacker to access private user data in transit. Affected components include the SMTP stack and the IMAP APPEND command. The published CVSSv3.1...