PT-2014-5585
CVE-2014-3896
·
Published
2014-07-29
·
Updated
2018-12-18
Description by
CVSS 2.0
6.8
MediumMetricsAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
acmailer versions prior to 3.8.17
acmailer versions 3.9.x prior to 3.9.10 Beta
Description
The issue allows remote attackers to hijack the authentication of arbitrary users for requests that modify or delete data. This can be demonstrated by modifying data that affects authorization.
Recommendations
For acmailer versions prior to 3.8.17, update to version 3.8.17 or later.
For acmailer versions 3.9.x prior to 3.9.10 Beta, update to version 3.9.10 Beta or later.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾