CVE-2001-1281: Medium severity Ipswitch IMail vulnerability
Web Messaging Server for Ipswitch IMail 7.04 and earlier allows remote authenticated users to change information for other users by modifying the olduser parameter in the "Change User Information" web form.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2001-1281?
CVE-2001-1281 is considered a moderate security risk due to its potential for unauthorized access to user information within the Web Messaging Server.
How do I fix CVE-2001-1281?
To fix CVE-2001-1281, update to a later version of Ipswitch IMail that is not vulnerable, preferably version 7.0.5 or later.
Who is affected by CVE-2001-1281?
CVE-2001-1281 affects Ipswitch IMail versions 6.0.2, 6.0.6, and 7.0.4.
What is the impact of exploiting CVE-2001-1281?
Exploiting CVE-2001-1281 allows remote authenticated users to modify information of other users, which can lead to data manipulation and compromise.
Is CVE-2001-1281 a common vulnerability?
CVE-2001-1281 is a known vulnerability in older versions of Ipswitch IMail and while not common today, it is crucial for users of those versions to be aware.