Published: 02/10/2020 Updated: 13/10/2020

CVSS v2 Base Score: 5.8 | Impact Score: 4.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 7.4 | Impact Score: 5.2 | Exploitability Score: 2.2

VMScore: 516

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:N

REDDOXX MailDepot 2032 SP2 2.2.1242 has Insufficient Session Expiration because tokens are not invalidated upon a logout.

Vulnerable Product	Search on Vulmon	Subscribe to Product
reddoxx maildepot 2032

MailDepot version 2032 SP2 (221242) suffers from a session expiration design issue ...

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Advisory ID: SYSS-2019-049 Product: MailDepot Manufacturer: REDDOXX GmbH Affected Version(s): 2032 SP2 (221242) Tested Version(s): 2032 SP2 (221242) Vulnerability Type: Insufficient Session Expiration (CWE-613) Risk Level: ...

CWE-613 https://www.syss.de/pentest-blog/https://www.reddoxx.com/en/products/archiving/http://seclists.org/fulldisclosure/2020/Sep/49 https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2019-049.txt https://nvd.nist.gov http://seclists.org/fulldisclosure/2020/Sep/49

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2019-19199

Vulnerability Summary

Vulnerability Trend

Exploits

Mailing Lists

References

Vulmon Search

About

Products

Connect