Lucene search

CVE-2020-29668

🗓️ 10 Dec 2020 08:11:15Reported by mitreType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 59 Views

Sympa before 6.2.59b.2 allows remote attackers to obtain full SOAP API access

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 25
Cvelist	CVE-2020-29668	10 Dec 202007:53	–	cvelist
OSV	sympa - security update	17 Dec 202000:00	–	osv
OSV	CVE-2020-29668	10 Dec 202008:15	–	osv
OSV	sympa - security update	23 Dec 202000:00	–	osv
Prion	Code injection	10 Dec 202008:15	–	prion
Tenable Nessus	Fedora 32 : sympa (2021-a5570c5281)	13 Jan 202100:00	–	nessus
Tenable Nessus	Debian DLA-2499-1 : sympa security update	18 Dec 202000:00	–	nessus
Tenable Nessus	Fedora 33 : sympa (2021-11cb6626e2)	13 Jan 202100:00	–	nessus
Tenable Nessus	FreeBSD : sympa -- Unauthorised full access via SOAP API due to illegal cookie (0add6e6b-6883-11eb-b0cb-f8b156c2bfe9)	3 May 202100:00	–	nessus
Tenable Nessus	Debian DSA-4818-1 : sympa - security update	24 Dec 202000:00	–	nessus

Nvd

Node

sympa sympaRange≤6.2.58

sympa sympaMatch6.2.59beta1

Node

fedoraproject fedoraMatch32

fedoraproject fedoraMatch33

Node

debian debian_linuxMatch9.0

debian debian_linuxMatch10.0

Source	Link
github	www.github.com/sympa-community/sympa/pull/1044
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JICIHAJKKCZXJNIICUDYXGZFQCN6J4U6/
github	www.github.com/sympa-community/sympa/issues/1041
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EFZWDEKQFW3EH665OECDWIWM2MI7T53Y/
bugs	www.bugs.debian.org/cgi-bin/bugreport.cgi
lists	www.lists.debian.org/debian-lts-announce/2020/12/msg00026.html
github	www.github.com/sympa-community/sympa/blob/6.2.59b.2/NEWS.md
debian	www.debian.org/security/2020/dsa-4818

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

10 Dec 2020 08:15Current

4.3Medium risk

Vulners AI Score4.3

CVSS24.3

CVSS33.7

EPSS0.01138