Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Mailman Insufficiently Protected Credentials Vulnerability - CVE-2021-43332 - Vulnerability Database
Mailman

Mailman Insufficiently Protected Credentials Vulnerability - CVE-2021-43332

Medium
Reference: CVE-2021-43332
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2021-43332
Title: Mailman Insufficiently Protected Credentials Vulnerability
Overview:

In GNU Mailman before 2.1.36 the CSRF token for the Cgi/admindb.py admindb page contains an encrypted version of the list admin password. This could potentially be cracked by a moderator via an offline brute-force attack.