← Back

CVE-2024-32370

nvd nist
Published: May 7, 2024Modified: Jun 17, 2026

JSON object

Loading...
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

An issue in HSC Cybersecurity HC Mailinspector 5.2.17-3 through 5.2.18 allows a remote attacker to obtain sensitive information via a crafted payload to the id parameter in the mliSystemUsers.php component.

Affected (1)

Hsclabs
1 product
Mailinspector
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Mailinspector
From 5.2.17-3 to 5.2.19

Related CWEs

CWE-782
Exposed IOCTL with Insufficient Access Control
The product implements an IOCTL with functionality that should be restricted, but it does not properly enforce access control for the IOCTL.

References (4)

Source: cve@mitre.org
Not Applicable
Source: cve@mitre.org
Exploit
Source: af854a3a-2127-422b-91ae-364da2661108
Not Applicable
Source: af854a3a-2127-422b-91ae-364da2661108
Exploit

Timeline

No history available yet.