CVE-2017-5930 in PostfixAdmin
Résumé (Anglaise)
The AliasHandler component in PostfixAdmin before 3.0.2 allows remote authenticated domain admins to delete protected aliases via the delete parameter to delete.php, involving a missing permission check.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
Réserver
07/02/2017
Divulgation
20/03/2017
Statut
Confirmé
Entrées
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnérabilité | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 98314 | PostfixAdmin AliasHandler delete.php gen_show_status Delete élévation de privilèges | 275 | Élevé | Correctif officiel | CVE-2017-5930 |