CVE-2020-36519

Mimecast Email Security before 2020-01-10 allows any admin to spoof any domain, and pass DMARC alignment via SPF

published March 15, 2022

CVSS
—
EPSS
1%
Percentile
56.6
In the wild
Unconfirmed
What it is

Mimecast Email Security before 2020-01-10 allows any admin to spoof any domain, and pass DMARC alignment via SPF. This occurs through misuse of the address rewrite feature. (The domain being spoofed must be a customer in the Mimecast grid from which the spoofing occurs.)

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00815 · 56.6th percentile
Published
2022-03-15T23:45Z
EPSS history
Timeline
  • 15 MAR 23:45Z
    Mimecast Email Security before 2020-01-10 allows any admin to spoof any domain, and pass DMARC alignment via SPF
    cvelistv5