CVE-2020-26942

CRITICAL

9.1

CVSS Severity Score

EPSS Score0.0440%

EPSS Percentile44.29th

Published2024年3月21日

Last Modified2025年3月5日

Vulnerability Description

An issue discovered in Axigen Mail Server 10.3.x before 10.3.1.27 and 10.3.2.x before 10.3.3.1 allows unauthenticated attackers to submit a setAdminPassword operation request, subsequently setting a new arbitrary password for the admin account.

Affected Platforms (CPE)

📦

Axigen

Axigen Mail Server

>= 10.3.0 and < 10.3.1.27

📦

Axigen

Axigen Mail Server

>= 10.3.2.0 and < 10.3.3.1

References & Advisories

🔗 https://www.axigen.com/knowledgebase/Axigen-WebAdmin-Authentication-Bypass-Vulnerability-CVE-2020-26942-_387.html

Vulnerability Description

Affected Platforms (CPE)

Axigen Mail Server

Axigen Mail Server

References & Advisories

相关漏洞威胁