add: AVE-2021-0003

Author: adysec

vulns/2021/AVE-2021-0003.toml

@@ -0,0 +1,33 @@
+[basic]
+description = "MessageSolution企业邮件归档管理系统EEA存在信息泄露漏洞，攻击者无需认证即可访问/authenticationservletservlet/接口，获取Windows服务器administrator的NTLM Hash以及Web管理平台所有用户的用户名和密码，直接威胁企业邮件系统安全。"
+published = "2021-03-25"
+remediation = "厂商已发布安全更新，建议升级MessageSolution EEA至最新版本；如无法升级，应在Web服务器上限制/authenticationservletservlet/路径的外部访问，或添加身份认证机制。"
+score = 7.5
+severity = "HIGH"
+sources = [
+    "nuclei",
+    "cnvd",
+]
+title = "MessageSolution 企业邮件归档管理系统 EEA 信息泄露漏洞"
+updated = "2021-03-28"
+
+[exploit]
+exp_urls = []
+poc_urls = ["https://github.com/Henry4E36/CNVD-2021-10543"]
+
+[id]
+aliases = [
+    "NUCLEI-HTTP-CNVD-2021-CNVD-2021-10543-YAML",
+    "CNVD-2021-10543",
+]
+ave_id = "AVE-2021-0003"
+
+[meta]
+collected_at = "2026-07-14T18:26:20.011290262+00:00"
+status = "completed"
+
+[references]
+urls = [
+    "https://www.cnvd.org.cn/flaw/show/CNVD-2021-10543",
+    "https://github.com/Henry4E36/CNVD-2021-10543",
+]