Back to Database
Status published
Unknown
CVE-2021-46900
Sympa before 6.2.62 relies on a cookie parameter for certain...
Vulnerability Description
Sympa before 6.2.62 relies on a cookie parameter for certain security objectives, but does not ensure that this parameter exists and has an unpredictable value. Specifically, the cookie parameter is both a salt for stored passwords and an XSS protection mechanism.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-46900
Credits & Attribution
No credits recorded in the NVD database.
References
More from sympa
View All →CVE-2020-9369
Sympa 6.2.38 through 6.2.52 allows remote attackers to cause a...
High
7.5
CVE-2020-29668
Sympa before 6.2.59b.2 allows remote attackers to obtain full SOAP...
Low
3.7
CVE-2020-26932
debian/sympa.postinst for the Debian Sympa package before 6.2.40~dfsg-7 uses mode...
Medium
4.3
CVE-2020-26880
Sympa through 6.2.57b.2 allows a local privilege escalation from the...
High
7.8
CVE-2020-10936
Sympa before 6.2.56 allows privilege escalation....
High
7.8
Affected Vendor
sympa
View all reports →Affected Software
sympa
Vulnerable Versions:
0
Timeline
Official Publish:
December 31st, 2023
Last Modified:
April 17th, 2025
Added to House:
July 21st, 2026
CVSS Vectors
No vector data available
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.