Amtelco : Security Vulnerabilities, CVEs,
Amtelco miSecureMessages (aka MSM) 6.2 does not properly manage sessions, which allows remote authenticated users to obtain sensitive information via a modified message request.
Max CVSS
3.5
EPSS Score
0.69%
Published
2014-05-06
Updated
2014-05-06
Amtelco miSecureMessages allows remote attackers to read the messages of arbitrary users via an XML request containing a valid license key and a modified contactID value, as demonstrated by a request from the iOS or Android application.
Max CVSS
5.0
EPSS Score
0.32%
Published
2014-04-15
Updated
2014-05-10
2 vulnerabilities found