CVE-2008-3729

2008-08-2016:00:00

mitre

www.cve.org

6.9 Medium

AI Score

Confidence

Low

0.011 Low

EPSS

Percentile

84.9%

JSON

Web Based Administration in MicroWorld Technologies MailScan 5.6.a espatch 1 allows remote attackers to bypass authentication and obtain administrative access via a direct request with (1) an IsAdmin=true cookie value or (2) no cookie.

References

marc.info/?l=bugtraq&m=121881329424635&w=2

securityreason.com/securityalert/4172

www.oliverkarow.de/research/mailscan.txt

www.securityfocus.com/bid/30700

exchange.xforce.ibmcloud.com/vulnerabilities/44515