Vulnerability · Published Sep 1, 2020 · Assigned by twcert
CVE-2020-12776Openfind Mail2000 - Broken Access Control
Medium 6.6
In plain English
A medium-severity security flaw in Mail2000 from Openfind. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 58% of all known vulnerabilities).
Severity (CVSS 3.1)6.6Medium
Exploit odds (30 days)0.8%top 42.2% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
Openfind Mail2000 contains Broken Access Control vulnerability, which can be used to execute unauthorized commands after attackers obtain the administrator access token or cookie.
Affected products (as reported)
References
- https://www.twcert.org.tw/tw/cp-132-3897-01d73-1.html x_refsource_MISC