{"api_version":"1","generated_at":"2026-07-23T05:58:01+00:00","cve":"CVE-2015-1306","urls":{"html":"https://cve.report/CVE-2015-1306","api":"https://cve.report/api/cve/CVE-2015-1306.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2015-1306","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2015-1306"},"summary":{"title":"CVE-2015-1306","description":"The newsletter posting area in the web interface in Sympa 6.0.x before 6.0.10 and 6.1.x before 6.1.24 allows remote attackers to read arbitrary files via unspecified vectors.","state":"PUBLISHED","assigner":"debian","published_at":"2015-01-22 15:59:00","updated_at":"2026-05-06 22:30:45"},"problem_types":["CWE-200","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"5","severity":"","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"}}],"references":[{"url":"http://secunia.com/advisories/62387","name":"http://secunia.com/advisories/62387","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Security Advisory SA62387 - Sympa Web Interface Newsletter Arbitrary File Disclosure Vulnerability - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:051","name":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:051","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Support / Security / Advisories /  / MDVSA-2015:051 | Mandriva","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/72277","name":"http://www.securityfocus.com/bid/72277","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Sympa CVE-2015-1306 File Disclosure Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://www.debian.org/security/2015/dsa-3134","name":"http://www.debian.org/security/2015/dsa-3134","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Debian -- Security Information -- DSA-3134-1 sympa","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.openwall.com/lists/oss-security/2015/01/20/4","name":"http://www.openwall.com/lists/oss-security/2015/01/20/4","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"oss-security - Possible CVE request: sympa: vulnerability in the web interface","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/62442","name":"http://secunia.com/advisories/62442","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Security Advisory SA62442 - Debian update for sympa - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.sympa.org/security_advisories","name":"https://www.sympa.org/security_advisories","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"title":"Security advisories    [Sympa mailing list server]","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://advisories.mageia.org/MGASA-2015-0085.html","name":"http://advisories.mageia.org/MGASA-2015-0085.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Mageia Advisory: MGASA-2015-0085 - Updated sympa packages fix CVE-2015-1306","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-1306","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-1306","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2015","cve_id":"1306","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sympa","cpe5":"sympa","cpe6":"6.0.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2015","cve_id":"1306","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sympa","cpe5":"sympa","cpe6":"6.0.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2015","cve_id":"1306","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sympa","cpe5":"sympa","cpe6":"6.0.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2015","cve_id":"1306","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sympa","cpe5":"sympa","cpe6":"6.0.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2015","cve_id":"1306","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sympa","cpe5":"sympa","cpe6":"6.0.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2015","cve_id":"1306","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sympa","cpe5":"sympa","cpe6":"6.0.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2015","cve_id":"1306","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sympa","cpe5":"sympa","cpe6":"6.0.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2015","cve_id":"1306","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sympa","cpe5":"sympa","cpe6":"6.0.7","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2015","cve_id":"1306","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sympa","cpe5":"sympa","cpe6":"6.0.8","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2015","cve_id":"1306","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sympa","cpe5":"sympa","cpe6":"6.0.9","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2015","cve_id":"1306","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sympa","cpe5":"sympa","cpe6":"6.1.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2015","cve_id":"1306","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sympa","cpe5":"sympa","cpe6":"6.1.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2015","cve_id":"1306","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sympa","cpe5":"sympa","cpe6":"6.1.10","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2015","cve_id":"1306","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sympa","cpe5":"sympa","cpe6":"6.1.11","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2015","cve_id":"1306","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sympa","cpe5":"sympa","cpe6":"6.1.12","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2015","cve_id":"1306","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sympa","cpe5":"sympa","cpe6":"6.1.13","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2015","cve_id":"1306","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sympa","cpe5":"sympa","cpe6":"6.1.14","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2015","cve_id":"1306","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sympa","cpe5":"sympa","cpe6":"6.1.15","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2015","cve_id":"1306","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sympa","cpe5":"sympa","cpe6":"6.1.16","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2015","cve_id":"1306","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sympa","cpe5":"sympa","cpe6":"6.1.17","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2015","cve_id":"1306","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sympa","cpe5":"sympa","cpe6":"6.1.18","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2015","cve_id":"1306","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sympa","cpe5":"sympa","cpe6":"6.1.19","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2015","cve_id":"1306","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sympa","cpe5":"sympa","cpe6":"6.1.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2015","cve_id":"1306","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sympa","cpe5":"sympa","cpe6":"6.1.20","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2015","cve_id":"1306","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sympa","cpe5":"sympa","cpe6":"6.1.21","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2015","cve_id":"1306","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sympa","cpe5":"sympa","cpe6":"6.1.22","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2015","cve_id":"1306","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sympa","cpe5":"sympa","cpe6":"6.1.23","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2015","cve_id":"1306","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sympa","cpe5":"sympa","cpe6":"6.1.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2015","cve_id":"1306","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sympa","cpe5":"sympa","cpe6":"6.1.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2015","cve_id":"1306","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sympa","cpe5":"sympa","cpe6":"6.1.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2015","cve_id":"1306","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sympa","cpe5":"sympa","cpe6":"6.1.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2015","cve_id":"1306","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sympa","cpe5":"sympa","cpe6":"6.1.7","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2015","cve_id":"1306","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sympa","cpe5":"sympa","cpe6":"6.1.8","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2015","cve_id":"1306","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sympa","cpe5":"sympa","cpe6":"6.1.9","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-06T04:40:18.640Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"MDVSA-2015:051","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred"],"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:051"},{"name":"[oss-security] 20150120 Possible CVE request: sympa: vulnerability in the web interface","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"http://www.openwall.com/lists/oss-security/2015/01/20/4"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://www.sympa.org/security_advisories"},{"name":"62387","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/62387"},{"name":"72277","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/72277"},{"name":"62442","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/62442"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://advisories.mageia.org/MGASA-2015-0085.html"},{"name":"DSA-3134","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"],"url":"http://www.debian.org/security/2015/dsa-3134"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2015-01-15T00:00:00.000Z","descriptions":[{"lang":"en","value":"The newsletter posting area in the web interface in Sympa 6.0.x before 6.0.10 and 6.1.x before 6.1.24 allows remote attackers to read arbitrary files via unspecified vectors."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2015-03-19T15:57:00.000Z","orgId":"79363d38-fa19-49d1-9214-5f28da3f3ac5","shortName":"debian"},"references":[{"name":"MDVSA-2015:051","tags":["vendor-advisory","x_refsource_MANDRIVA"],"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:051"},{"name":"[oss-security] 20150120 Possible CVE request: sympa: vulnerability in the web interface","tags":["mailing-list","x_refsource_MLIST"],"url":"http://www.openwall.com/lists/oss-security/2015/01/20/4"},{"tags":["x_refsource_CONFIRM"],"url":"https://www.sympa.org/security_advisories"},{"name":"62387","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/62387"},{"name":"72277","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/72277"},{"name":"62442","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/62442"},{"tags":["x_refsource_CONFIRM"],"url":"http://advisories.mageia.org/MGASA-2015-0085.html"},{"name":"DSA-3134","tags":["vendor-advisory","x_refsource_DEBIAN"],"url":"http://www.debian.org/security/2015/dsa-3134"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"security@debian.org","ID":"CVE-2015-1306","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"The newsletter posting area in the web interface in Sympa 6.0.x before 6.0.10 and 6.1.x before 6.1.24 allows remote attackers to read arbitrary files via unspecified vectors."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"MDVSA-2015:051","refsource":"MANDRIVA","url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:051"},{"name":"[oss-security] 20150120 Possible CVE request: sympa: vulnerability in the web interface","refsource":"MLIST","url":"http://www.openwall.com/lists/oss-security/2015/01/20/4"},{"name":"https://www.sympa.org/security_advisories","refsource":"CONFIRM","url":"https://www.sympa.org/security_advisories"},{"name":"62387","refsource":"SECUNIA","url":"http://secunia.com/advisories/62387"},{"name":"72277","refsource":"BID","url":"http://www.securityfocus.com/bid/72277"},{"name":"62442","refsource":"SECUNIA","url":"http://secunia.com/advisories/62442"},{"name":"http://advisories.mageia.org/MGASA-2015-0085.html","refsource":"CONFIRM","url":"http://advisories.mageia.org/MGASA-2015-0085.html"},{"name":"DSA-3134","refsource":"DEBIAN","url":"http://www.debian.org/security/2015/dsa-3134"}]}}}},"cveMetadata":{"assignerOrgId":"79363d38-fa19-49d1-9214-5f28da3f3ac5","assignerShortName":"debian","cveId":"CVE-2015-1306","datePublished":"2015-01-22T15:00:00.000Z","dateReserved":"2015-01-22T00:00:00.000Z","dateUpdated":"2024-08-06T04:40:18.640Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2015-01-22 15:59:00","lastModifiedDate":"2026-05-06 22:30:45","problem_types":["CWE-200","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"FB4BF564-2AE0-4DCE-B331-873E8480C965"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D2BB62E4-8207-4344-87CE-FB916E7ECA90"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"304DCEDD-661D-400A-94AB-B0DB20843327"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:6.0.3:*:*:*:*:*:*:*","matchCriteriaId":"05707525-5CD4-49DA-B137-D6F3F793BB40"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:6.0.4:*:*:*:*:*:*:*","matchCriteriaId":"FB1AF942-E11C-4FF2-863E-E1C47D76D485"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:6.0.5:*:*:*:*:*:*:*","matchCriteriaId":"01016580-A947-4DE4-9033-4697CE9AF12A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:6.0.6:*:*:*:*:*:*:*","matchCriteriaId":"B5F00F31-CA66-43E8-8FE8-3DE0AC483C6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:6.0.7:*:*:*:*:*:*:*","matchCriteriaId":"551375FB-45DB-4CC1-BDFC-E95F2795B6E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:6.0.8:*:*:*:*:*:*:*","matchCriteriaId":"73C4A58F-D1D0-4F90-9A67-DB72B10347F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:6.0.9:*:*:*:*:*:*:*","matchCriteriaId":"7F5FF29A-5032-4AB4-B5BF-750B384A3253"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:6.1.0:*:*:*:*:*:*:*","matchCriteriaId":"A9A7F6F1-04A0-43CA-98F8-48F5511DFA89"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:6.1.1:*:*:*:*:*:*:*","matchCriteriaId":"CE3806CA-EFF4-4DC1-827D-D720155231FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:6.1.2:*:*:*:*:*:*:*","matchCriteriaId":"2D74B084-02D3-4410-85BA-9C624A29BFC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:6.1.3:*:*:*:*:*:*:*","matchCriteriaId":"81F89FD3-5FF5-498A-8909-E31D62AB42B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:6.1.4:*:*:*:*:*:*:*","matchCriteriaId":"CB7F80BB-388F-41A7-BCD2-46EA20DC2E6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:6.1.5:*:*:*:*:*:*:*","matchCriteriaId":"F5CB2B7F-325F-489D-98DF-89D2173EF676"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:6.1.6:*:*:*:*:*:*:*","matchCriteriaId":"4C251761-00A7-4C37-A9DC-E34F4BC40208"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:6.1.7:*:*:*:*:*:*:*","matchCriteriaId":"76A7EE36-064D-4498-AC81-349CE832C03A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:6.1.8:*:*:*:*:*:*:*","matchCriteriaId":"0560EDE9-268B-45F0-A3F0-88781EA52A7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:6.1.9:*:*:*:*:*:*:*","matchCriteriaId":"38AD95A8-6074-43ED-806F-E1512A4ED2D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:6.1.10:*:*:*:*:*:*:*","matchCriteriaId":"DED874B0-E182-455C-BED7-E15751DA4148"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:6.1.11:*:*:*:*:*:*:*","matchCriteriaId":"5C89CA1F-4352-45C2-B8AE-7C18EB5A4145"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:6.1.12:*:*:*:*:*:*:*","matchCriteriaId":"8C52EAD2-7F18-4431-AF5B-05BE52D5E2DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:6.1.13:*:*:*:*:*:*:*","matchCriteriaId":"5BB42670-39BD-4AEC-BF49-EBD4AD75404A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:6.1.14:*:*:*:*:*:*:*","matchCriteriaId":"FAAFD5F8-2656-4944-A359-8163CBD58181"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:6.1.15:*:*:*:*:*:*:*","matchCriteriaId":"4E139BC3-D07E-42A2-B2D8-39143F3DFACC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:6.1.16:*:*:*:*:*:*:*","matchCriteriaId":"8BCBDA07-5C4E-4584-A2FB-D681CBD4F52F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:6.1.17:*:*:*:*:*:*:*","matchCriteriaId":"CA67608D-8D20-4A72-83F8-A28032C3C840"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:6.1.18:*:*:*:*:*:*:*","matchCriteriaId":"A1EA5703-FF75-497D-8F88-8BD98A48FF81"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:6.1.19:*:*:*:*:*:*:*","matchCriteriaId":"9F2C2D97-7439-4A3D-B9AE-C6990D78FAB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:6.1.20:*:*:*:*:*:*:*","matchCriteriaId":"20F272D3-3486-41B5-BB33-92C5ABE9B3B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:6.1.21:*:*:*:*:*:*:*","matchCriteriaId":"E7A420CA-4F90-4CCF-BF0A-6AC14041E659"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:6.1.22:*:*:*:*:*:*:*","matchCriteriaId":"6DF29DFE-7741-4BEA-8BA4-CE07D435E2FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:6.1.23:*:*:*:*:*:*:*","matchCriteriaId":"7D034E88-50F5-469F-BEF2-AC25C43FDDB9"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2015","CveId":"1306","Ordinal":"1","Title":"CVE-2015-1306","CVE":"CVE-2015-1306","Year":"2015"},"notes":[{"CveYear":"2015","CveId":"1306","Ordinal":"1","NoteData":"The newsletter posting area in the web interface in Sympa 6.0.x before 6.0.10 and 6.1.x before 6.1.24 allows remote attackers to read arbitrary files via unspecified vectors.","Type":"Description","Title":"CVE-2015-1306"},{"CveYear":"2015","CveId":"1306","Ordinal":"2","NoteData":"2015-01-22","Type":"Other","Title":"Published"},{"CveYear":"2015","CveId":"1306","Ordinal":"3","NoteData":"2015-03-19","Type":"Other","Title":"Modified"}]}}}