CVE-2008-1904: Cicoandcico CcMail 1.0.1 and earlier does not verify that the this_cookie cookie corresponds to an authenti...

Security readout for executives and security teams

CVE-2008-1904 is an authentication bypass in Cicoandcico CcMail 1.0.1 and earlier. An attacker could gain access to the administrative area by manipulating a cookie that the application fails to tie to a valid authenticated session. Exposure is likely limited to legacy Cicoandcico CcMail deployments, especially internet-accessible installations at version 1.0.1 or earlier. Modern environments are unlikely to be affected unless this old application remains in use. Prioritize this if CcMail is still present. The business risk is administrative compromise of an obsolete web application, but exposure is likely narrow and evidence of active exploitation is not provided. Mitigation focus: Inventory systems for Cicoandcico CcMail 1.0.1 or earlier.; Check vendor or trusted archival guidance for an official fix.; Retire or replace unsupported CcMail deployments where possible..

Prepared

Jun 28, 2026, 19:09 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.