by Kastro
Paper/Archive/CVE-2021-20618

CVE-2021-20618

Seeds Co.,Ltd. acmailer and acmailer DB — Privilege chaining vulnerability in acmailer ver.

EPSS 3%CVSS 9.8
critical.is priorityof 100
47
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 88.6.886 × 2017.7No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

Privilege chaining vulnerability in acmailer ver. 4.0.2 and earlier, and acmailer DB ver. 1.1.4 and earlier allows remote attackers to bypass authentication and to gain an administrative privilege which may result in obtaining the sensitive information on the server via unspecified vectors.

Affected

ProductAffectedFixed inSource
acmailer and acmailer DBacmailer ver. 4.0.2 and earlier, and acmailer DB ver. 1.1.4 and earlier–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refacmailer.jp/info/de.cgi?id=101refjvn.jp/en/jp/JVN35906450/index.html