CVE-2001-1537

CVE-2001-1537 describes a critical vulnerability in TWIG webmail versions 2.7.4 and earlier, where the default "basic" security setting in config.php stores user credentials in cleartext cookies. This flaw allows attackers to easily intercept authentication information, potentially leading to unauthorized access and privilege escalation. With a CVSS score of 7.5 (High), this vulnerability is easily exploitable over the network with low attack complexity, resulting in high confidentiality impact. While there is no evidence of active exploitation, nor readily available exploit code in Metasploit or ExploitDB, the lack of community discussion or media coverage is typical for older CVEs.