Description (CNA)
Macallan Mail Solution 2.8.4.6 (Build 260), and possibly earlier versions, allows remote attackers to bypass authentication in the web interface via an HTTP GET request with two slashes ("//") after the server name.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://securitytracker.com/id?1009030
- http://www.osvdb.org/3926
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15194
- http://secunia.com/advisories/10861
- http://www.securityfocus.com/bid/9646
- https://testzone.secunia.com/advisories/10861
ADP enrichment
No English description supplied.