CVE-2020-36519

2022-03-1523:45:01

mitre

www.cve.org

5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

24.8%

JSON

Mimecast Email Security before 2020-01-10 allows any admin to spoof any domain, and pass DMARC alignment via SPF. This occurs through misuse of the address rewrite feature. (The domain being spoofed must be a customer in the Mimecast grid from which the spoofing occurs.)