Mail2000 Vulnerability Allows Remote Execution of Arbitrary System Commands

CVE-2024-5399

What is CVE-2024-5399?

Openfind Mail2000 is susceptible to a vulnerability that arises from inadequate filtering of parameters in specific application programming interfaces (APIs). This oversight enables remote attackers, particularly those with administrative privileges, to exploit the system. By leveraging this vulnerability, attackers can execute arbitrary commands on the vulnerable server, potentially compromising its integrity and confidentiality. Users of Openfind Mail2000 are urged to apply the necessary security updates and patches to mitigate potential risks.

References