CVE-2000-0716
LOW—CVSS v3
2.6CVSS v2
0.42%
EPSS (exploit probability)
—CWE
Description
WorldClient email client in MDaemon 2.8 includes the session ID in the referer field of an HTTP request when the user clicks on a URL, which allows the visited web site to hijack the session ID and read the user's email.
Affected routers (0)
No routers currently mapped to this CVE in our database.