CVE-2019-7212 in Mailing List

Résumé

par MITRE

SmarterTools SmarterMail 16.x before build 6985 has hardcoded secret keys. An unauthenticated attacker could access other users? emails and file attachments. It was also possible to interact with mailing lists.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Réserver: 29/01/2019
• Modérer: accepté
• Entrée: VDB-134010
• CPE: prêt
• CWE: CWE-798 (confirmé)
• CVSS: 8.2 (NVD)
• EPSS: 0.01007
• KEV: non
• Activités: très faible
• Secteur: Hostingprovider

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2019-7212
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2019-7212
• CVE Details: https://www.cvedetails.com/cve/CVE-2019-7212/