Directory Traversal Vulnerability in IceWarp Webclient by IceWarp
CVE-2010-5334

7.5HIGH

Key Information:

Vendor

Icewarp

Status
Webclient
Vendor
CVE Published:
11 October 2019

What is CVE-2010-5334?

The IceWarp Webclient prior to version 10.2.1 possesses a directory traversal flaw, allowing unauthorized users to access sensitive files on the server. This vulnerability stems from inadequate input sanitization of a specific parameter. As a result, attackers may exploit this weakness to browse directories and retrieve files from the IceWarp installation directory or potentially the entire operating system, leading to exposure of confidential information stored within the IceWarp Mailserver.

References

https://www.gosecurity.ch/fachartikel/168-gosecurity-advi...
x_refsource_MISC
https://vuldb.com/?id.142994
x_refsource_MISC

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.