Debian/sogo: medium 4.3
SOGo before 2.3.12 and 3.x before 3.1.1 does not restrict access to the UID and DTSTAMP attributes, which allows remote authenticated users to obtain sensitive information about appointments with the
Action: Upgrade sogo to 3.2.4-0.2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.2.4-0.2 | - |
Fixed versions
| 3.2.4-0.2 |
Sources
published · modified · JSON