CVE-2013-2302: TransWARE Active!

Security readout for executives and security teams

CVE-2013-2302 is an older information-disclosure issue in TransWARE Active! mail 6. If the external public interface is used and someone already has shell access to the server, they may obtain sensitive information belonging to other users. The provided sources do not include CVSS, confirmed exploitation, or a named patch. Exposure is most likely in legacy environments still running TransWARE Active! mail 6 with external public interface use and local shell access enabled for users or administrators. Prioritize inventory and containment if this legacy mail system is still in use. Business urgency is moderate for affected shared servers because the issue concerns cross-user data exposure, but the public evidence does not show active exploitation or a scored severity. Mitigation focus: Inventory systems for TransWARE Active! mail 6.; Check JVN and vendor guidance for available updates or configuration changes.; Restrict TELNET and SSH shell access to trusted administrators only..

Prepared

Jun 24, 2026, 11:46 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.