Design/Logic Flaw

2019-08-3009:15:00

PRIOn knowledge base

www.prio-n.com

5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

36.1%

Log viewer in totemomail 6.0.0 build 570 allows access to sessionIDs of high privileged users by leveraging access to a read-only auditor role.

CPENameOperatorVersion
totemomaileq6.0.0 570

CPE	Name	Operator	Version
	totemomail	eq	6.0.0 570

References

www.contextis.com/en/resources/advisories/cve-2018-15513