CVE Database · CVE-2014-0103
CVSS v3.1
N/A
EPSS
0.38%
Published
Jul 29, 2014
Modified
May 6, 2026
Public PoC / Exploit
All weaponized →No public PoC or exploit code indexed for this CVE.
Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.
Description
WebAccess in Zarafa before 7.1.10 and WebApp before 1.6 stores credentials in cleartext, which allows local Apache users to obtain sensitive information by reading the PHP session files.
Weaknesses (CWE)
Affected Products (24)
References (12)