Description
Pipermail in Mailman stores private mail messages with predictable filenames in a world-executable directory, which allows local users to read private mailing list archives.
Remediation
References
Related Vulnerabilities
osCommerce Other Vulnerability (CVE-2005-1951)
ownCloud Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-9048)
WordPress Plugin Woo Custom Checkout Field Multiple Vulnerabilities (1.3.2)
Apache Tomcat Improper Access Control Vulnerability (CVE-2016-5388)
WordPress Plugin MAC PHOTO GALLERY 'albid' Parameter Arbitrary File Disclosure (2.8)