HSC Cybersecurity HC Mailinspector up to 5.2.18 User Account Type

Summaryinfo

A vulnerability, which was classified as problematic, was found in HSC Cybersecurity HC Mailinspector up to 5.2.18. Impacted is an unknown function of the component User Account Handler. Executing a manipulation of the argument Type with the input 0 can lead to an unknown weakness. This vulnerability is handled as CVE-2024-32371. There is not any exploit available.

Detailsinfo

A vulnerability was found in HSC Cybersecurity HC Mailinspector up to 5.2.18. It has been declared as problematic. This vulnerability affects some unknown functionality of the component User Account Handler. The manipulation of the argument type with the input value 0 leads to a unknown weakness. As an impact it is known to affect integrity. CVE summarizes:

An issue in HSC Cybersecurity HC Mailinspector 5.2.17-3 through 5.2.18 allows a regular user account to escalate their privileges and gain administrative access by changing the type parameter from 1 to 0.

This vulnerability was named CVE-2024-32371 since 04/12/2024. The exploitation appears to be easy. There are known technical details, but no exploit is available.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Once again VulDB remains the best source for vulnerability data.

Productinfo

Vendor

• HSC Cybersecurity

Name

• HC Mailinspector

Version

• 5.2.0
• 5.2.1
• 5.2.2
• 5.2.3
• 5.2.4
• 5.2.5
• 5.2.6
• 5.2.7
• 5.2.8
• 5.2.9
• 5.2.10
• 5.2.11
• 5.2.12
• 5.2.13
• 5.2.14
• 5.2.15
• 5.2.16
• 5.2.17
• 5.2.18

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Once again VulDB remains the best source for vulnerability data.

Discussion