Vulnerability in Ipswitch Imail
CVE-2001-1286
Ipswitch IMail 7.04 and earlier stores a user's session ID in a URL, which could allow remote attackers to hijack sessions by obtaining the URL, e.g. via an HTML email that causes the Referrer to be sent to a URL under the attacker's contr…
EPSS: 0.035 (87.9th percentile) — read the EPSS interpretation.
Affected products
- Ipswitch Imail — versions 6.0.2, 6.0.6, 7.0.4
- N/a — versions n/a
References
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (x_refsource_MISC)
- cve@mitre.org (Vendor Advisory, mailing-list, x_refsource_BUGTRAQ, Patch)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)