CVE-2018-3815

NONE EPSS 54.9%
Published Jan 8, 20188y ago · Modified Jun 17, 20262w ago
Find Similar
Published Jan 8, 2018 8y ago
Last Modified Jun 17, 2026 2w ago

Description

The "XML Interface to Messaging, Scheduling, and Signaling" (XIMSS) protocol implementation in CommuniGate Pro (CGP) 6.2 suffers from a Missing XIMSS Protocol Validation attack that leads to an email spoofing attack, allowing a malicious authenticated attacker to send a message from any source email address. The attack uses an HTTP POST request to a /Session URI, and interchanges the XML From and To elements.

Threat Intelligence

EPSS Exploit Probability
54.9% percentile
Exploit & Patch Status
Public Exploit Known
No Patch Available

Weaknesses 1

CWE-287 Improper Authentication Authentication

Affected Products 1

VendorProductVersionRange
stalkercommunigate_pro6.2any

References 1

  • packetstormsecurity.com https://packetstormsecurity.com/files/145724/communigatepro62-spoof
    ExploitThird Party AdvisoryVDB Entry

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.