CVE-2014-5449

CVE-2014-5449 affects Zarafa WebAccess 4.1 and WebApp, where files in the tmp directory used world-readable permissions allowed local users to read temporary session data. The connected advisory set confirms multiple permission issues and includes CVEs 2014-0103, 2014-5447, 2014-5448, 2014-5449, ...