CVE-2020-36519

MEDIO 4.9CVE-2020-36519 · Published 16/03/2022 · updated 17/06/2026

En resumen

CVE-2020-36519 es una vulnerabilidad MEDIO (CVSS 4.9) que afecta a email security (mimecast).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.81%, mayor que el 57.3% de las vulnerabilidades.
Solución: actualizar a 2020-01-10 o posterior.

Package	Affected versions	Patched versions
email security mimecast	`< 2020-01-10`	`2020-01-10`

Description

Mimecast Email Security before 2020-01-10 allows any admin to spoof any domain, and pass DMARC alignment via SPF. This occurs through misuse of the address rewrite feature. (The domain being spoofed must be a customer in the Mimecast grid from which the spoofing occurs.)

References

wesleyk.me/2020/01/10/my-first-vulnerability-mimecast-sender-address-verification · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free