An issue was discovered in CIPPlanner CIPAce 6.80 Build 2016031401. GetDistributedPOP3 allows attackers to obtain the username and password of the SMTP user.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11599
Reference (s):
- https://www.criticalstart.com/vulnerabilities-discovered-in-cipace-enterprise-platform/