Authorization Bypass in Horde Groupware Products by Horde
CVE-2008-7219

Currently unrated

Key Information:

Vendor: Horde
Status: Nag H3; Groupware; Groupware Webmail Edition; Kronolith H3
Vendor: CVE Published:; 13 September 2009

What is CVE-2008-7219?

The affected Horde Groupware products exhibit a vulnerability that fails to validate user ownership during share changes. This can potentially allow unauthorized users to manipulate shared resources without proper permissions, leading to unknown impacts and possible exploitation. Users of affected versions are advised to upgrade to the patched releases to mitigate risks associated with this vulnerability.

References

http://lists.horde.org/archives/announce/2008/000371.html

mailing-listx_refsource_MLIST

http://lists.horde.org/archives/announce/2008/000369.html

mailing-listx_refsource_MLIST

http://lists.horde.org/archives/announce/2008/000363.html

mailing-listx_refsource_MLIST

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability Reserved
Oct 3, 2022
Vulnerability published
Sep 13, 2009

CVE-2008-7219 Data

JSON