cbcvebase.
CVE-2011-3580
published 2011-09-30

CVE-2011-3580: IceWarp WebMail in IceWarp Mail Server before 10.3.3 allows remote attackers to obtain configuration information via a direct request to the /server URI, which…

PriorityP423medium5CVSS 2.0
AVNACLAuNCPINAN
EPSS
1.61%
72.9th percentile
IceWarp WebMail in IceWarp Mail Server before 10.3.3 allows remote attackers to obtain configuration information via a direct request to the /server URI, which triggers a call to the phpinfo function.

Affected

20 ranges
VendorProductVersion rangeFixed in
icewarpmail_server<= 10.3.2—
icewarpmail_server——
icewarpmail_server——
icewarpmail_server——
icewarpmail_server——
icewarpmail_server——
icewarpmail_server——
icewarpmail_server——
icewarpmail_server——
icewarpmail_server——
icewarpmail_server——
icewarpmail_server——
icewarpmail_server——
icewarpmail_server——
icewarpmail_server——
icewarpmail_server——
icewarpmail_server——
icewarpmail_server——
icewarpmail_server——
icewarpmail_server——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.