Vulnerability Details CVE-2018-0682
Denbun by NEOJAPAN Inc. (Denbun POP version V3.3P R4.0 and earlier, Denbun IMAP version V3.3I R4.0 and earlier) does not properly manage sessions, which allows remote attackers to read/send mail or change the configuration via unspecified vectors.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.011
EPSS Ranking 77.2%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 7.5
References
- http://jvn.jp/en/jp/JVN00344155/index.html
- https://www.denbun.com/en/imap/support/security/181003.html
- https://www.denbun.com/en/pop/support/security/181003.html
- http://jvn.jp/en/jp/JVN00344155/index.html
- https://www.denbun.com/en/imap/support/security/181003.html
- https://www.denbun.com/en/pop/support/security/181003.html
Products affected by CVE-2018-0682
-
cpe:2.3:a:neo:debun_imap:3.3i_r1.0
-
cpe:2.3:a:neo:debun_imap:3.3i_r1.3
-
cpe:2.3:a:neo:debun_imap:3.3i_r4.0
-
cpe:2.3:a:neo:debun_pop:3.3p_r1.0
-
cpe:2.3:a:neo:debun_pop:3.3p_r1.3
-
cpe:2.3:a:neo:debun_pop:3.3p_r4.0