Read the docs
TI-2024-06248 Aliases CVE-2024-6741GHSA-v3v6-h9vm-h39c

Openfind Mail2000 - HttpOnly flag bypass

Priority LOW 33CWE-693Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
Low · None · None
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-693.

Summary

Openfind's Mail2000 has a vulnerability that allows the HttpOnly flag to be bypassed. Unauthenticated remote attackers can exploit this vulnerability using specific JavaScript code to obtain the session cookie with the HttpOnly flag enabled.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00644 51st percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Fixed Mail2000 V7.0 (Openfind): Patch 131Mail2000 V8.0 (Openfind): Patch 044

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
OpenfindMail2000 V7.0all to before Patch 131Patch 131Patch availableCNA
OpenfindMail2000 V8.0all to before Patch 044Patch 044Patch availableCNA
  • Mail2000 V7.0 VendorOpenfind Affected all to before Patch 131 Fixed in Patch 131 Patch available CNA
  • Mail2000 V8.0 VendorOpenfind Affected all to before Patch 044 Fixed in Patch 044 Patch available CNA

CPE configurations NVD · 2

CPEVersionsRoleVendor
cpe:2.3:a:openfind:mail2000:7.0:*:*:*:*:*:*:*7.0VulnerableOpenfind
cpe:2.3:a:openfind:mail2000:8.0:*:*:*:*:*:*:*8.0VulnerableOpenfind
  • cpe:2.3:a:openfind:mail2000:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Openfind
  • cpe:2.3:a:openfind:mail2000:8.0:*:*:*:*:*:*:* Versions 8.0 Vulnerable ·Openfind

Remediation

  • Fix · CNA Mail2000 V7.0 (Openfind) Fixed in Patch 131
  • Fix · CNA Mail2000 V8.0 (Openfind) Fixed in Patch 044

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Advisory ·

    Openfind Mail2000 V7.0, Mail2000 V8.0 — openfind.com.tw/taiwan/download/Openfind_OF-ISAC-24-007.pdf

    2 records Highest priority Priority LOW 2 LOW

    Other records, highest priority first

    Show all 2 records → Advisory →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2024-6741
  2. 2026-10-03 Alias added: GHSA-v3v6-h9vm-h39c
  3. 2026-10-21 EPSS moved to the 50th–90th percentile

References

Exploit 1

Advisory 2

  • TI-2024-05016 Openfind Mail2000 - OS Command Injection CVSS 3.1HIGH 8.8
  • TI-2020-10161 Openfind Mail2000 - Broken Access Control CVSS 3.1HIGH 7.2
  • TI-2024-05015 Openfind Mail2000 - OS Command Injection CVSS 3.1HIGH 7.2
  • TI-2019-11251 Openfind MAIL2000 Webmail Pre-Auth Cross-Site Scripting CVSS 3.1MEDIUM 6.1
  • TI-2019-11252 Openfind MAIL2000 Webmail Post-Auth Cross-Site Scripting CVSS 3.1MEDIUM 6.1
  • TI-2019-07155 An issue was discovered in Openfind Mail2000 6.0 and 7.0 Webmail. CVSS 3.0MEDIUM 6.1
See all 10 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences