PT-2018-10124 · Synametrics · Synaman

Bzyo · Publicado 2018-09-14 · Atualizado 2019-10-03 · CVE-2018-10814

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Synametrics SynaMan version 4.0 build 1488

Description The issue concerns the use of cleartext password storage for SMTP credentials.

Recommendations For Synametrics SynaMan version 4.0 build 1488, consider updating the configuration to use secure password storage for SMTP credentials. As a temporary workaround, restrict access to the SMTP configuration to minimize the risk of exploitation.

Exploit

Correção

Insufficiently Protected Credentials

Enumeração de Fraquezas

CWE-522

Identificadores relacionados

CVE-2018-10814

Produtos afetados

Synaman

Referências · 4

• 🔥 https://exploit-db.com/exploits/45387 · Exploit
• https://osv.dev/vulnerability/CVE-2018-10814 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-10814 · Nota de Segurança
• http://packetstormsecurity.com/files/149326/SynaMan-40-Build-1488-SMTP-Credential-Disclosure.html · Nota