Vulnerabilities > Sympa > Low

DATE	CVE	VULNERABILITY TITLE	RISK
2020-12-10	CVE-2020-29668	Reliance on Cookies without Validation and Integrity Checking vulnerability in multiple products Sympa before 6.2.59b.2 allows remote attackers to obtain full SOAP API access by sending any arbitrary string (except one from an expired cookie) as the cookie value to authenticateAndRun. network high complexity sympa fedoraproject debian CWE-565	3.7

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.