CVE-2008-0210

Uebimiau Webmail 2.7.10 and 2.7.2 does not protect authentication state variables from being set through HTTP requests, which allows remote attackers to bypass…

published January 10, 2008

CVSS
—
EPSS
2%
Percentile
81.8
In the wild
Unconfirmed
What it is

Uebimiau Webmail 2.7.10 and 2.7.2 does not protect authentication state variables from being set through HTTP requests, which allows remote attackers to bypass authentication via a sess[auth]=1 parameter settting. NOTE: this can be leveraged to conduct directory traversal attacks without authentication by using CVE-2008-0140.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02128 · 81.8th percentile
Published
2008-01-10T00:00Z
EPSS history
Timeline
  • 10 JAN 00:00Z
    Uebimiau Webmail 2.7.10 and 2.7.2 does not protect authentication state variables from being set through HTTP requests, which allows remote attackers to bypass…
    cvelistv5