Threats tagged 'ghsa-84j6-j2xp-crm8'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	–	CVE-2026-49939In Apache James server prior version 3.9.1 improper Access Control List processing is exposed by the JMAP protocol High2026-11-06GCVE DatabaseCVE-2026-49939 Apache James server versions prior to 3.9.1 have an improper Access Control List (ACL) processing vulnerability in the JMAP protocol. This flaw arises because the JMAP protocol does not correctly handle negative ACL rules set by the IMAP protocol, allowing users to administer folders despite explicit denial of rights in IMAP. Upgrading to version 3.9.1 resolves this issue. Report on CVE-2026-49939 Vulnerability CWE-284 #ghsa-84j6-j2xp-crm8	GCVE Database	2026-11-06

Page 1 of 1