Web Based Administration in MicroWorld Technologies MailScan 5.6.a espatch 1 allows remote attackers to bypass authentication and obtain administrative access via a direct request with (1) an IsAdmin=true cookie value or (2) no cookie.
| Software | From | Fixed in |
|---|---|---|
| microworld_technologies / mailscan | 5.6.a | 5.6.a.x |