1. Home
  2. CVE Database
  3. CVE-2021-20618
CRITICAL · 9.8

CVE-2021-20618

Privilege chaining vulnerability in acmailer ver. 4.0.2 and earlier, and acmailer DB ver. 1.1.4 and earlier allows remote attackers to bypass authentication and to gain an administrative privilege whi...

Vulnerability Description

Privilege chaining vulnerability in acmailer ver. 4.0.2 and earlier, and acmailer DB ver. 1.1.4 and earlier allows remote attackers to bypass authentication and to gain an administrative privilege which may result in obtaining the sensitive information on the server via unspecified vectors.

CVSS Score

9.8

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
AcmailerAcmailer<= 4.0.2
AcmailerAcmailer Db<= 1.1.4

Related Weaknesses (CWE)

CWE-269

References

FAQ

What is CVE-2021-20618?

CVE-2021-20618 is a vulnerability with a CVSS score of 9.8 (CRITICAL). Privilege chaining vulnerability in acmailer ver. 4.0.2 and earlier, and acmailer DB ver. 1.1.4 and earlier allows remote attackers to bypass authentication and to gain an administrative privilege whi...

How severe is CVE-2021-20618?

CVE-2021-20618 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2021-20618?

Check the references section above for vendor advisories and patch information. Affected products include: Acmailer Acmailer, Acmailer Acmailer Db.