CVE-2013-2302

The CVE-2013-2302 entry concerns TransWARE Active! mail 6. Affected component: Active! mail with an external public interface enabled. Root cause: information disclosure allowing local users to obtain other users’ credentials by leveraging shell access via TELNET/SSH to the server. Impact (as doc...

CVE-2013-2302: Exposure of Sensitive Information to an Unauthorized Actor

TransWARE Active! mail 6, when an external public interface is used, allows local users to obtain sensitive information belonging to arbitrary users by leveraging shell access, as demonstrated by a TELNET or SSH session to the server...