CVE-2020-7918: Medium severity Totemo Totemomail vulnerability
Published Mar 27, 2020
·Updated
An insecure direct object reference in webmail in totemo totemomail 7.0.0 allows an authenticated remote user to read and modify mail folder names of other users via enumeration.
Affected Software
1 affected component
Totemo Totemomail=7.0.0
Event History
Mar 27, 2020
CVE Published
via MITRE·01:43 PM
Data Sourced
via MITRE·01:43 PM
Description
Data Sourced
via NVD·02:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2020-7918?
The severity of CVE-2020-7918 is rated as high due to its potential for unauthorized access to user data.
2
How do I fix CVE-2020-7918?
To fix CVE-2020-7918, upgrade to a patched version of Totemomail that addresses the insecure direct object reference issue.
3
Who is affected by CVE-2020-7918?
Authenticated users of Totemomail 7.0.0 are affected by CVE-2020-7918 if they have access to mail folder information.
4
What type of vulnerability is CVE-2020-7918?
CVE-2020-7918 is classified as an insecure direct object reference vulnerability.
5
Can CVE-2020-7918 lead to data breaches?
Yes, CVE-2020-7918 can potentially lead to data breaches by allowing unauthorized users to access and modify other users' mail folder names.