by Kastro
Paper/Archive/CVE-2021-20617

CVE-2021-20617

Seeds Co.,Ltd. acmailer and acmailer DB — Improper access control vulnerability in acmailer ver.

EPSS 7%CVSS 9.8
critical.is priorityof 100
48
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 94.4.944 × 2018.9No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

Improper access control vulnerability in acmailer ver. 4.0.1 and earlier, and acmailer DB ver. 1.1.3 and earlier allows remote attackers to execute an arbitrary OS command, or gain an administrative privilege which may result in obtaining the sensitive information on the server via unspecified vectors.

Affected

ProductAffectedFixed inSource
acmailer and acmailer DBacmailer ver. 4.0.1 and earlier, and acmailer DB ver. 1.1.3 and earlier–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refacmailer.jp/info/de.cgi?id=101refjvn.jp/en/jp/JVN35906450/index.html