Information Exposure in IceWarp WebMail by IceWarp

CVE-2011-3580

What is CVE-2011-3580?

IceWarp WebMail, part of the IceWarp Mail Server, is susceptible to a vulnerability that allows remote attackers to access sensitive configuration information. This is achieved through a direct request to the /server URI, which activates the phpinfo function, potentially disclosing critical server settings. This vulnerability highlights the importance of securing server endpoints to prevent unauthorized information disclosure.

References