Medium severity4.9NVD Advisory· Published Mar 16, 2022· Updated Jun 17, 2026
CVE-2020-36519
CVE-2020-36519
Description
Mimecast Email Security before 2020-01-10 allows any admin to spoof any domain, and pass DMARC alignment via SPF. This occurs through misuse of the address rewrite feature. (The domain being spoofed must be a customer in the Mimecast grid from which the spoofing occurs.)
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2cpe:2.3:a:mimecast:email_security:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:mimecast:email_security:*:*:*:*:*:*:*:*range: <2020-01-10
- (no CPE)range: <2020-01-10
Patches
Vulnerability mechanics
References
1- wesleyk.me/2020/01/10/my-first-vulnerability-mimecast-sender-address-verification/nvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.