CVE-2020-29668

Sympa before 6.2.59b.2 allows remote attackers to obtain full SOAP API access by sending any arbitrary string (except one from an expired cookie) as the cookie…

published December 10, 2020

CVSS
—
EPSS
2%
Percentile
80.4
In the wild
Unconfirmed
What it is

Sympa before 6.2.59b.2 allows remote attackers to obtain full SOAP API access by sending any arbitrary string (except one from an expired cookie) as the cookie value to authenticateAndRun.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01981 · 80.4th percentile
Published
2020-12-10T07:53Z
EPSS history
Timeline
  • 10 DEC 07:53Z
    Sympa before 6.2.59b.2 allows remote attackers to obtain full SOAP API access by sending any arbitrary string (except one from an expired cookie) as the cookie…
    cvelistv5