Find real vulnerabilities before they ship
WorldClient email client in MDaemon 2.8 includes the session ID in the referer field of an HTTP request when the user clicks on a URL, which allows the visited web site to hijack the session ID and read the user's email.
| Base Score | 2.6 |
|---|---|
| Vector String | AV:N/AC:H/Au:N/C:P/I:N/A:N |
| Base Severity | Unknown |
| Version | 2.0 |
| Attack Vector (AV) |
