CVE-2022-45935: Usage of temporary files with insecure permissions by the Apache James server allows an attacker with local access to access private user data in transit…

medium5.5CVSS 3.1

AVLACLPRLUINSUCHINAN

Usage of temporary files with insecure permissions by the Apache James server allows an attacker with local access to access private user data in transit. Vulnerable components includes the SMTP stack and IMAP APPEND command. This issue affects Apache James server version 3.7.2 and prior versions.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
apache	james	<= 3.7.2	—
apache_software_foundation	apache_james_server	<= 3.7.2	—