Lucene search

K
cvelistJpcertCVELIST:CVE-2021-20617
HistoryJan 14, 2021 - 8:20 a.m.

CVE-2021-20617

2021-01-1408:20:16
jpcert
www.cve.org
4
access control vulnerability
acmailer
remote attackers
os commands
administrative privilege
sensitive information
unspecified vectors

AI Score

9.8

Confidence

High

EPSS

0.008

Percentile

81.9%

Improper access control vulnerability in acmailer ver. 4.0.1 and earlier, and acmailer DB ver. 1.1.3 and earlier allows remote attackers to execute an arbitrary OS command, or gain an administrative privilege which may result in obtaining the sensitive information on the server via unspecified vectors.

CNA Affected

[
  {
    "product": "acmailer and acmailer DB",
    "vendor": "Seeds Co.,Ltd.",
    "versions": [
      {
        "status": "affected",
        "version": "acmailer ver. 4.0.1 and earlier, and acmailer DB ver. 1.1.3 and earlier"
      }
    ]
  }
]

AI Score

9.8

Confidence

High

EPSS

0.008

Percentile

81.9%

Related for CVELIST:CVE-2021-20617