CVEvulnerability

CVE-2001-1281

5.0 MEDIUM Published 2001-10-12 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2001-10-12
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N

Description

Web Messaging Server for Ipswitch IMail 7.04 and earlier allows remote authenticated users to change information for other users by modifying the olduser parameter in the "Change User Information" web form.

Affected configurations

• ipswitch imail 6.0.2 • ipswitch imail 6.0.6 • ipswitch imail 7.0.4

References