CVE-2008-7219
Critical
Description
Horde Kronolith H3 2.1 before 2.1.7 and 2.2 before 2.2-RC2; Nag H3 2.1 before 2.1.4 and 2.2 before 2.2-RC2; Mnemo H3 2.1 before 2.1.2 and H3 2.2 before 2.2-RC2; Groupware 1.0 before 1.0.3 and 1.1 before 1.1-RC2; and Groupware Webmail Edition 1.0 before 1.0.4 and 1.1 before 1.1-RC2 does not validate ownership when performing share changes, which has unknown impact and attack vectors.
SeverityCritical
CVSS10.0
Exploit probability—
ProductHorde Groupware
PublishedSep 13, 2009
First seenSep 13, 2009
How to fix
Vendor advisories
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| horde groupware | 1.0, 1.0.1, 1.0.2, 1.1 | — |
| horde groupware_webmail_edition | 1.0, 1.0.2, 1.0.3, 1.1 | — |
| horde kronolith_h3 | 2.1, 2.1.1, 2.1.2, 2.1.3, 2.1.4, 2.1.5, 2.1.6, 2.2 | — |
| horde mnemo_h3 | 2.1, 2.1.1, 2.2 | — |
| horde nag_h3 | 2.1, 2.1.1, 2.1.2, 2.1.3, 2.2 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.