PT-2019-13026

CVE-2019-12926

·

Published

2019-07-08

·

Updated

2020-08-24

Description by

CVSS 3.1
8.8
High
MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions MailEnable Enterprise Premium version 10.23
Description The issue concerns inadequate access control checks in multiple areas, allowing users to perform unauthorized actions and access restricted parts of the application despite having insufficient permissions.
Recommendations For MailEnable Enterprise Premium version 10.23, consider restricting access to sensitive areas of the application and implementing additional access control checks to prevent unauthorized actions until a fix is available. As a temporary workaround, review and adjust user permissions to minimize the risk of exploitation.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾