https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 09 Nov 2026 16:36:50 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-49939 <p>In Apache James server prior version 3.9.1 improper Access Control List processing is exposed by the JMAP protocol which do not account for negative rules positionned by IMAP protocol.</p> <p>This results in users being able to administer folders in JMAP despite having being explicitly denied the right to do so in IMAP.</p> <p>Users are recommended to upgrade to version 3.9.1 which fixes this issue.</p> <p>In Apache James server prior version 3.9.1 improper Access Control List processing is exposed by the JMAP protocol which do not account for negative rules positionned by IMAP protocol.</p> <p>This results in users being able to administer folders in JMAP despite having being explicitly denied the right to do so in IMAP.</p> <p>Users are recommended to upgrade to version 3.9.1 which fixes this issue.</p> https://db.gcve.eu/vuln/fkie_cve-2026-49939 https://db.gcve.eu/vuln/ghsa-84j6-j2xp-crm8 <p>In Apache James server prior version 3.9.1 improper Access Control List processing is exposed by the JMAP protocol which do not account for negative rules positionned by IMAP protocol.</p> <p>This results in users being able to administer folders in JMAP despite having being explicitly denied the right to do so in IMAP.</p> <p>Users are recommended to upgrade to version 3.9.1 which fixes this issue.</p> <p>In Apache James server prior version 3.9.1 improper Access Control List processing is exposed by the JMAP protocol which do not account for negative rules positionned by IMAP protocol.</p> <p>This results in users being able to administer folders in JMAP despite having being explicitly denied the right to do so in IMAP.</p> <p>Users are recommended to upgrade to version 3.9.1 which fixes this issue.</p> https://db.gcve.eu/vuln/ghsa-84j6-j2xp-crm8