> ## Content Index
> Fetch the complete content index at: https://darkwebinformer.com/llms.txt
> Use this file to discover other available public pages before exploring further.

# PoC Released for CVE-2024-41958
- URL: https://darkwebinformer.com/poc-released-for-cve-2024-41958/
- Published: 2024-08-06T13:29:54.000Z
- Updated: 2025-09-04T22:28:04.000Z
- Author: Dark Web Informer
- Tags: Vulnerabilities

Link: <https://github.com/OrangeJuiceHU/CVE-2024-41958-PoC>

"This is a small proof of concept for `CVE-2024-41958`.

It is possible to bypass the TFA authentication on the admin panel.

Affected versions: `< 2024-07`

### Prerequisites needed for the CVE to function:

[](https://github.com/OrangeJuiceHU/CVE-2024-41958-PoC?tab=readme-ov-file#prerequisites-needed-for-the-cve-to-function)

- `Password` and `username` for an account without TFA.
- `Password` and `username` for an account which has TFA enabled.
- Mailcow version below `2024-07`.

### How to use the poc:

[](https://github.com/OrangeJuiceHU/CVE-2024-41958-PoC?tab=readme-ov-file#how-to-use-the-poc)

1. Install the dependency

```
pip install -r requirements.txt

```

1. Fill in the necessary informations in the sript
- URL
- Password and username for the user who does not have TFA enabled
- Password and username for the user who has TFA enabled
1. Run the script

```
python poc.py

```

The output if the script works fine:

```
PoC works!

PHPSESSID=6cd6779a5e499a0e7708aed3aae9d3a4

```

1. Copy the `PHPSESSID` and set the cookie in your browser

[](https://github.com/OrangeJuiceHU/CVE-2024-41958-PoC/blob/main/resources/cookie.png)

1. Refresh the page
2. You are now logged in as the user with TFA enabled"