Linux Distros Unpatched Vulnerability : CVE-2021-46900

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Sympa before 6.2.62 relies on a cookie parameter for certain security objectives, but does not ensure that this parameter exists and has an unpredictable value...

CVE-2021-46900

Sympa (open source mail list software) is affected by CVE-2021-46900 in versions before 6.2.62. The vulnerability arises from using a cookie parameter as both a salt for stored passwords and an XSS protection mechanism, without ensuring the parameter exists or has an unpredictable value. Reported...

CVE-2021-46900

Sympa before 6.2.62 relies on a cookie parameter for certain security objectives, but does not ensure that this parameter exists and has an unpredictable value. Specifically, the cookie parameter is both a salt for stored passwords and an XSS protection mechanism...