Description (CNA)
Unknown vulnerability in Merak Mail Server 8.0.3 with Icewarp Web Mail 5.4.2 allows remote authenticated users to obtain the full path of the server via certain requests to (1) calendar_addevent.html, (2) calendar_event.html, or (3) calendar_task.html.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://marc.info/?l=bugtraq&m=111530933016434&w=2
- http://secunia.com/advisories/15249
- https://exchange.xforce.ibmcloud.com/vulnerabilities/20469
ADP enrichment
No English description supplied.