CVE-2012-2368

EUVD-2012-2359
Bytemark Symbiosis before Revision 1322 does not properly validate passwords, which allows remote attackers to gain access to email accounts via an arbitrary password.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 54%
Affected Products (NVD)
VendorProductVersion
bytemarksymbiosis
𝑥
≤ 1321
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://secunia.com/advisories/48993
http://www.openwall.com/lists/oss-security/2012/05/14/1
http://www.openwall.com/lists/oss-security/2012/05/14/3
https://projects.bytemark.co.uk/projects/symbiosis/repository/diff?rev=1327&rev_to=1322
http://secunia.com/advisories/48993
http://www.openwall.com/lists/oss-security/2012/05/14/1
http://www.openwall.com/lists/oss-security/2012/05/14/3
https://projects.bytemark.co.uk/projects/symbiosis/repository/diff?rev=1327&rev_to=1322