CVE-2020-12776: Openfind Mail2000 - Broken Access Control
Published Sep 1, 2020
·Updated
Openfind Mail2000 contains Broken Access Control vulnerability, which can be used to execute unauthorized commands after attackers obtain the administrator access token or cookie.
Affected Software
1 affected component
Openfind Mail2000=7.0
Remediation
Information
Update Patch to 091 of SP4, or contact with Openfind.
Event History
Sep 1, 2020
CVE Published
via MITRE·08:10 AM
Data Sourced
via MITRE·08:10 AM
RemedyDescriptionSeverityWeakness
Frequently Asked Questions
1
What is the vulnerability ID of this Openfind Mail2000 vulnerability?
The vulnerability ID of this Openfind Mail2000 vulnerability is CVE-2020-12776.
2
What is the severity rating of CVE-2020-12776?
CVE-2020-12776 has a severity rating of 7.2 (critical).
3
What is the description of the Openfind Mail2000 vulnerability?
The Openfind Mail2000 vulnerability is a broken access control vulnerability that allows attackers to execute unauthorized commands after obtaining the administrator access token or cookie.
4
Which version of Openfind Mail2000 is affected by CVE-2020-12776?
The version 7.0 of Openfind Mail2000 is affected by CVE-2020-12776.
5
Where can I find more information about CVE-2020-12776?
You can find more information about CVE-2020-12776 at this link: https://www.twcert.org.tw/tw/cp-132-3897-01d73-1.html