CVEvulnerability

CVE-2021-20618

9.8 CRITICAL Published 2021-01-14 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2021-01-14
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-269

Description

Privilege chaining vulnerability in acmailer ver. 4.0.2 and earlier, and acmailer DB ver. 1.1.4 and earlier allows remote attackers to bypass authentication and to gain an administrative privilege which may result in obtaining the sensitive information on the server via unspecified vectors.

Affected configurations

• acmailer acmailer (<= 4.0.2) • acmailer acmailer db (<= 1.1.4)

Related

Weakness · CWE (1)

  • CWE-269 Improper Privilege Management weakness

References