CVE-2022-45935

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2022-45935
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-45935.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2022-45935
Aliases
Related
Published
2023-01-06T09:33:30.150Z
Modified
2026-07-15T01:49:14.241905878Z
Severity
  • 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
Summary
Apache James server: Temporary File Information Disclosure
Details

Usage of temporary files with insecure permissions by the Apache James server allows an attacker with local access to access private user data in transit.

Vulnerable components includes the SMTP stack and IMAP APPEND command.

This issue affects Apache James server version 3.7.2 and prior versions.

Database specific 
{
    "unresolved_ranges": [
        {
            "source": "AFFECTED_FIELD",
            "extracted_events": [
                {
                    "last_affected": "3.7.2"
                }
            ]
        }
    ],
    "cna_assigner": "apache",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/45xxx/CVE-2022-45935.json",
    "cwe_ids": [
        "CWE-668"
    ]
}
References

Affected packages

Git / github.com/apache/james-project

Affected ranges

Type
GIT
Repo
https://github.com/apache/james-project
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
41014d3eec695491da5b6eb1949d252c7c5ceb0f
Database specific 
{
    "cpe": "cpe:2.3:a:apache:james:*:*:*:*:*:*:*:*",
    "source": "CPE_RANGE",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "3.7.2"
        }
    ]
}

Affected versions

Other
cassandra_migration_v1_to_v2
james-project-3.*
james-project-3.0-beta5
james-project-3.0.0
james-project-3.0.0-RC1
james-project-3.0.0-beta5
james-project-3.3.0
james-project-3.4.0
james-project-3.7.0
james-project-3.7.1
james-project-3.7.2
pre-3.*
pre-3.1.0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-45935.json"