CVE-2021-20617

CVE-2021-20617 concerns Acmailer and Acmailer DB with an improper access control flaw that allows remote attackers to execute arbitrary OS commands or escalate privileges (CWE-284). Affected versions are Acmailer 4.0.1 and earlier and Acmailer DB 1.1.3 and earlier; the issue enables command execu...

JVN#35906450: Multiple vulnerabilities in acmailer

acmailer provided by Seeds Co.,Ltd. contains multiple vulnerabilities listed below. Improper Access Control CWE-284 - CVE-2021-20617 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H| Base Score: 9.8 CVSS v2| AV:N/AC:L/Au:N/C:P/I:P/A:P| Base Score: 7.5...