Local Privilege Escalation in Seafile Server by Seafile Ltd.
CVE-2014-5443

7.8HIGH

Key Information:

Vendor

Seafile

Status
Seafile Server
Vendor
CVE Published:
19 March 2018

What is CVE-2014-5443?

Seafile Server versions prior to 3.1.2 and the Professional Edition before 3.1.0 contain a vulnerability that allows local users to escalate their privileges. This exploitation occurs through insecure handling of user accounts, specifically related to the ccnet component, which may lead to unauthorized access to sensitive resources within the application. Organizations utilizing affected versions should take immediate action to apply updates and mitigate potential risks.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/95458
vdb-entryx_refsource_XF
https://manual.seafile.com/changelog/changelog-for-seafil...
x_refsource_CONFIRM
https://manual.seafile.com/changelog/server-changelog.html
x_refsource_CONFIRM

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.