[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f_CVGcHnYAJjhCexNQ9l1iesbBcUtn-lfpTtE71OAIgo":3,"g5a-risk:CVE-2017-15235":113},{"success":4,"data":5,"meta":111},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":15,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":48,"references":49,"referencesCount":64,"weaknesses":65,"weaknessesCount":48,"isActivelyExploited":74,"cisaInfo":15,"otxData":15,"relatedBlogPosts":75,"seoMetadata":76,"configurations":101,"relatedVendorCves":109,"notableEvents":110},"CVE-2017-15235","What is CVE-2017-15235?","The File Manager (gollem) module 3.0.11 in Horde Groupware 5.2.21 allows remote attackers to bypass Horde authentication for file downloads via a crafted fn parameter that corresponds to the exact filename.","The File Manager (gollem) module 3.0.11 in Horde Groupware 5.2.21 allows remote attackers to bypass Horde authentication for file downloads via a crafted fn ...","2017-10-11T03:29:00.257","2025-04-20T01:37:25.86",7.5,"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":29,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":24,"AvailabilityImpact":24,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","NETWORK","LOW","NONE","UNCHANGED","HIGH",3.9,3.6,[30],{"Source":18,"Type":19,"CVSSData":31,"BaseSeverity":36,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},{"Version":32,"VectorString":33,"AccessVector":22,"AccessComplexity":23,"Authentication":24,"ConfidentialityImpact":34,"IntegrityImpact":24,"AvailabilityImpact":24,"BaseScore":35,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:N\u002FA:N","PARTIAL",5,"MEDIUM",10,2.9,0.0553,[39,39,39,39,39,39,39],"High",[43],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"horde","groupware","5.2.21","cpe:2.3:a:horde:groupware:5.2.21:*:*:*:*:*:*:*",1,[50,56,60,62],{"url":51,"source":52,"tags":53},"https:\u002F\u002Fblogs.securiteam.com\u002Findex.php\u002Farchives\u002F3454","Securiteam",[54,55],"Exploit","Third Party Advisory",{"url":57,"source":58,"tags":59},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2020\u002F08\u002Fmsg00050.html","Debian",[],{"url":51,"source":52,"tags":61},[54,55],{"url":57,"source":58,"tags":63},[],4,[66],{"id":67,"name":68,"description":69,"extendedDescription":70,"status":71,"abstraction":72,"structure":73},"CWE-425","Direct Request ('Forced Browsing')","The web application does not adequately enforce appropriate authorization on all restricted URLs, scripts, or files.","Web applications susceptible to direct request attacks often make the false assumption that such resources can only be reached through a given navigation path and so only apply authorization at certain points in the path.","Incomplete","Base","Simple",false,[],{"title":77,"metaDescription":78,"keywords":79,"canonicalUrl":80,"structuredData":81},"What is CVE-2017-15235? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2017-15235, a high severity cyber security vulnerability from 2017. The File Manager (gollem) module 3.0.11 in Horde Groupware ...","CVE-2017-15235, CVE-2017-15235 vulnerability, CVE-2017-15235 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2017, CVSS score, exploit, patch, remediation, horde security, groupware vulnerability","\u002Fwhat-is\u002Fcve-2017-15235",{"@context":82,"@type":83,"headline":77,"description":78,"datePublished":10,"dateModified":11,"author":84,"publisher":88,"about":92,"mainEntityOfPage":96,"articleSection":99,"keywords":100},"https:\u002F\u002Fschema.org","TechArticle",{"@type":85,"name":86,"url":87},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":85,"name":86,"url":87,"logo":89},{"@type":90,"url":91},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":93,"name":6,"description":94,"additionalType":95},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":97,"@id":98},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2017-15235","Cybersecurity","CVE-2017-15235, CVE-2017-15235 vulnerability, CVE-2017-15235 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[102],{"Operator":15,"Negate":15,"Nodes":103},[104],{"Operator":105,"Negate":15,"CPEMatch":106},"OR",[107],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":108,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"A7054862-3FC5-4F4D-8596-3E9CF7E9D793",[],[],{"lastModified":11,"cacheTime":112,"version":32},1792372407664,{"score":114,"band":115,"action":116,"scoredAt":117},48,"Medium","Plan remediation","2026-10-17T09:12:19.367671+00:00"]