{"id":"CVE-2008-7219","aliases":["EUVD-2008-7178","GHSA-v979-m555-4gx8"],"status":"published","title":"Horde Kronolith H3 2.1 before 2.1.7 and 2.2 before 2.2-RC2; Nag H3 2.1 before 2.1.4 and 2.2...","description":"Horde Kronolith H3 2.1 before 2.1.7 and 2.2 before 2.2-RC2; Nag H3 2.1 before 2.1.4 and 2.2 before 2.2-RC2; Mnemo H3 2.1 before 2.1.2 and H3 2.2 before 2.2-RC2; Groupware 1.0 before 1.0.3 and 1.1 before 1.1-RC2; and Groupware Webmail Edition 1.0 before 1.0.4 and 1.1 before 1.1-RC2 does not validate ownership when performing share changes, which has unknown impact and attack vectors.","severity":{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.02744,"percentile":0.86269,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-264"],"published":"2009-09-13T22:00:00Z","modified":"2026-06-16T23:03:51Z","products":[{"vendor":"horde","product":"groupware"},{"vendor":"horde","product":"groupware_webmail_edition"},{"vendor":"horde","product":"kronolith_h3"},{"vendor":"horde","product":"mnemo_h3"},{"vendor":"horde","product":"nag_h3"}],"references":[{"url":"http://lists.horde.org/archives/announce/2008/000371.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Patch"]},{"url":"http://lists.horde.org/archives/announce/2008/000369.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Patch"]},{"url":"http://lists.horde.org/archives/announce/2008/000363.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Patch"]},{"url":"http://www.securityfocus.com/bid/27217","tags":["vdb-entry","x_refsource_BID","x_transferred","Patch"]},{"url":"http://lists.horde.org/archives/announce/2008/000365.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Patch"]},{"url":"http://lists.horde.org/archives/announce/2008/000376.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Patch"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00176.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"]},{"url":"http://lists.horde.org/archives/announce/2008/000364.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Patch"]},{"url":"http://secunia.com/advisories/28382","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"http://lists.horde.org/archives/announce/2008/000377.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Patch"]},{"url":"http://lists.horde.org/archives/announce/2008/000366.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Patch"]},{"url":"http://lists.horde.org/archives/announce/2008/000362.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Patch"]},{"url":"http://lists.horde.org/archives/announce/2008/000368.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Patch"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-7219"},{"url":"https://github.com/advisories/GHSA-v979-m555-4gx8"}],"sources":{"cve":[{"id":"CVE-2008-7219","description":"Horde Kronolith H3 2.1 before 2.1.7 and 2.2 before 2.2-RC2; Nag H3 2.1 before 2.1.4 and 2.2 before 2.2-RC2; Mnemo H3 2.1 before 2.1.2 and H3 2.2 before 2.2-RC2; Groupware 1.0 before 1.0.3 and 1.1 before 1.1-RC2; and Groupware Webmail Edition 1.0 before 1.0.4 and 1.1 before 1.1-RC2 does not validate ownership when performing share changes, which has unknown impact and attack vectors.","status":"published","published":"2009-09-13T22:00:00Z","modified":"2024-09-17T01:06:15.652Z","updated_at":"2026-11-02T14:34:48.103804Z"}],"euvd":[{"id":"EUVD-2008-7178","description":"Horde Kronolith H3 2.1 before 2.1.7 and 2.2 before 2.2-RC2; Nag H3 2.1 before 2.1.4 and 2.2 before 2.2-RC2; Mnemo H3 2.1 before 2.1.2 and H3 2.2 before 2.2-RC2; Groupware 1.0 before 1.0.3 and 1.1 before 1.1-RC2; and Groupware Webmail Edition 1.0 before 1.0.4 and 1.1 before 1.1-RC2 does not validate ownership when performing share changes, which has unknown impact and attack vectors.","status":"published","published":"2009-09-13T22:00:00Z","modified":"2024-09-17T01:06:15Z","updated_at":"2026-11-03T00:28:52.69419Z"}],"ghsa":[{"id":"GHSA-v979-m555-4gx8","title":"Horde Kronolith H3 2.1 before 2.1.7 and 2.2 before 2.2-RC2; Nag H3 2.1 before 2.1.4 and 2.2...","description":"Horde Kronolith H3 2.1 before 2.1.7 and 2.2 before 2.2-RC2; Nag H3 2.1 before 2.1.4 and 2.2 before 2.2-RC2; Mnemo H3 2.1 before 2.1.2 and H3 2.2 before 2.2-RC2; Groupware 1.0 before 1.0.3 and 1.1 before 1.1-RC2; and Groupware Webmail Edition 1.0 before 1.0.4 and 1.1 before 1.1-RC2 does not validate ownership when performing share changes, which has unknown impact and attack vectors.","status":"published","published":"2022-05-17T05:42:21Z","modified":"2023-01-28T05:04:25Z","updated_at":"2026-11-02T14:44:09.964048Z"}],"nvd":[{"id":"CVE-2008-7219","description":"Horde Kronolith H3 2.1 before 2.1.7 and 2.2 before 2.2-RC2; Nag H3 2.1 before 2.1.4 and 2.2 before 2.2-RC2; Mnemo H3 2.1 before 2.1.2 and H3 2.2 before 2.2-RC2; Groupware 1.0 before 1.0.3 and 1.1 before 1.1-RC2; and Groupware Webmail Edition 1.0 before 1.0.4 and 1.1 before 1.1-RC2 does not validate ownership when performing share changes, which has unknown impact and attack vectors.","status":"published","published":"2009-09-13T22:30:00.42Z","modified":"2026-06-16T23:03:51.13Z","cvss":[{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-264"],"updated_at":"2026-11-02T14:01:32.081314Z"}]}}