Vulnerability · Published Apr 15, 2020 · Assigned by twcert
CVE-2020-10511HGiga C&Cmail - Broken Access Control
Critical 9.8
In plain English
A critical-severity security flaw in C&Cmail from HGiga. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 2.2% (higher than 83% of all known vulnerabilities).
Severity (CVSS 3.1)9.8Critical
Exploit odds (30 days)2.2%top 17.1% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
HGiga C&Cmail CCMAILQ before olln-base-6.0-418.i386.rpm and CCMAILN before olln-base-5.0-418.i386.rpm contains insecure configurations. Attackers can exploit these flaws to access unauthorized functionality via a crafted URL.
Affected products (as reported)
References
- https://www.twcert.org.tw/tw/cp-132-3535-e40ec-1.html x_refsource_MISC
- https://gist.github.com/tonykuo76/7d41c414f23ef1e47c97f7b97e1b33b0 x_refsource_CONFIRM
- https://www.chtsecurity.com/news/19400b04-ea92-4eaa-afa7-2449fd9b2e0b x_refsource_CONFIRM