Ensim WEBppliance 3.0 and 3.1 allows remote attackers to read mail intended for other users by defining an alias that is the target's email address.
Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.
Link | Tags |
---|---|
http://securitytracker.com/id?1004938 | vdb entry |
http://www.securityfocus.com/bid/5418 | vdb entry |
http://xwss.org/thread.jsp?forum=107&thread=864 |