CVE-2017-5930

Low

The AliasHandler component in PostfixAdmin before 3.0.2 allows remote authenticated domain admins to delete protected aliases via the…

redhat·CWE-862·Published 2017-03-20

CVSS

2.7

EPSS

0.15

KEV

Exploits

Vendor statements (1)

lists.opensuse.org

cve.orgen

203 chars

The AliasHandler component in PostfixAdmin before 3.0.2 allows remote authenticated domain admins to delete protected aliases via the delete parameter to delete.php, involving a missing permission check.

NVDes

256 chars

El componente AliasHandler en PostfixAdmin en versiones anteriores a 3.0.2 permiten a los administradores de dominio autenticados remotos eliminar alias protegidos a través del parámetro delete para delete.php, implicando un cheque de permiso desaparecido.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	3.5	6.8	2.9	AV:N/AC:M/Au:S/C:N/I:P/A:N
3.1	Primary	NVD	2.7	1.2	1.4	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N