CVE-2018-15513: Medium severity totemomail vulnerability
Published Aug 29, 2019
·Updated
Log viewer in totemomail 6.0.0 build 570 allows access to sessionIDs of high privileged users by leveraging access to a read-only auditor role.
Affected Software
1 affected component
Totemo Totemomail=6.0.0-570
Event History
Aug 29, 2019
CVE Published
via MITRE·09:21 PM
Data Sourced
via MITRE·09:21 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID of Log viewer in totemomail?
The vulnerability ID of Log viewer in totemomail is CVE-2018-15513.
2
What is the severity level of CVE-2018-15513?
The severity level of CVE-2018-15513 is medium with a severity value of 5.3.
3
How does Log viewer in totemomail 6.0.0 build 570 allow access to sessionIDs of high privileged users?
Log viewer in totemomail 6.0.0 build 570 allows access to sessionIDs of high privileged users by leveraging access to a read-only auditor role.
4
What software version and build is affected by CVE-2018-15513?
CVE-2018-15513 affects totemomail 6.0.0 build 570.
5
Is there any resource available for more information about CVE-2018-15513?
Yes, you can find more information about CVE-2018-15513 at the following link: [contextis.com](https://www.contextis.com/en/resources/advisories/cve-2018-15513).