CVE-2019-10229

An issue was discovered in MailStore Server (and Service Provider Edition) 9.x through 11.x before 11.2.2

published December 31, 2019

CVSS
—
EPSS
1%
Percentile
57.3
In the wild
Unconfirmed
What it is

An issue was discovered in MailStore Server (and Service Provider Edition) 9.x through 11.x before 11.2.2. When the directory service (for synchronizing and authenticating users) is set to Generic LDAP, an attacker is able to login as an existing user with an arbitrary password on the second login attempt.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00837 · 57.3th percentile
Published
2019-12-31T14:25Z
EPSS history
Timeline
  • 31 DEC 14:25Z
    An issue was discovered in MailStore Server (and Service Provider Edition) 9.x through 11.x before 11.2.2
    cvelistv5