[horde] medium & high security risk - CVE-2019-12095

[Ralf Lang]

Hi,

Am 01.11.19 um 05:44 schrieb Nethub Online - Ming:
> Hi all,
>
> vulnerability database - NIST said on 24 Oct 2019 that the flaws pose a
> “high” security risk to users :
> https://nvd.nist.gov/vuln/detail/CVE-2019-12095
> https://nvd.nist.gov/vuln/detail/CVE-2019-12094
>
> should we worry about it? seems no one handling bug #14926 :
> https://bugs.horde.org/ticket/14926
>
> Ming

As far as I understand the case, attacker needs to be admin to exploit this.

I will look into this though.


Regards


Ralf

-- 
Ralf Lang
Linux Consultant / Developer
Tel.: +49-170-6381563
Mail: lang at b1-systems.de
B1 Systems GmbH
Osterfeldstraße 7 / 85088 Vohburg / http://www.b1-systems.de
GF: Ralph Dehner / Unternehmenssitz: Vohburg / AG: Ingolstadt,HRB 3537