CVEvulnerability

CVE-2019-12926

8.8 HIGH Published 2019-07-08 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2019-07-08
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
8.8 HIGH — CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
Weaknesses
CWE-862

Description

MailEnable Enterprise Premium 10.23 did not use appropriate access control checks in a number of areas. As a result, it was possible to perform a number of actions, when logged in as a user, that that user should not have had permission to perform. It was also possible to gain access to areas within the application for which the accounts used were supposed to have insufficient access.

Affected configurations

• mailenable mailenable (>= 6.0 < 6.90) • mailenable mailenable (>= 7.0 < 7.62) • mailenable mailenable (>= 8.00 < 8.64) • mailenable mailenable (>= 9.0 < 9.83) • mailenable mailenable (>= 10.00 < 10.24)

Related

Weakness · CWE (1)

  • CWE-862 Missing Authorization weakness

References