CVE Catalog
CVE-2000-0397
MediumExploitation Probability (EPSS)
High risk2.73%
84th percentile - higher than 84% of all known CVEs
Summary
The EMURL web-based email account software encodes predictable identifiers in user session URLs, allowing a remote attacker to access a user's email account.
Risk Assessment
An attacker could gain unauthorized access to users' email accounts, potentially leading to data theft or other malicious activities.
Recommendation
It is recommended to implement random identifiers in session URLs and additional security mechanisms to protect user accounts.
Original NVD description (English source)
The EMURL web-based email account software encodes predictable identifiers in user session URLs, which allows a remote attacker to access a user's email account.