Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Mailcow through 2024-11b has a session fixation vulnerability in the web panel. It allows remote attackers to set a session identifier when HSTS is disabled on a victim's browser. After a user logs in, they are authenticated and the session identifier is valid. Then, a remote attacker can access the victim's web panel with the same session identifier.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
mailcow 安全漏洞
Vulnerability Description
mailcow是mailcow开源的一个邮件服务器套件。 mailcow 2024-11b及之前版本存在安全漏洞，该漏洞源于存在会话固定漏洞，导致攻击者能访问用户面板。
CVSS Information
N/A
Vulnerability Type
N/A