PT-2019-18464 · Smartertools · Smartermail

Publicado 2019-04-24 · Atualizado 2020-02-10 · CVE-2019-7212

Positive Technologies (AI Summary)

CVSS v3.1

8.2

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

Name of the Vulnerable Software and Affected Versions SmarterTools SmarterMail versions 16.x before build 6985

Description The issue allows an unauthenticated attacker to access other users' emails and file attachments. It also enables interaction with mailing lists.

Recommendations For versions 16.x before build 6985, update to build 6985 or later to resolve the issue.

Exploit

Correção

Using Hardcoded Credentials

Enumeração de Fraquezas

CWE-798

Identificadores relacionados

CVE-2019-7212

Produtos afetados

Smartermail

Referências · 4

• 🔥 https://smartertools.com/smartermail/release-notes/current · Exploit
• https://nccgroup.trust/uk/our-research/technical-advisory-multiple-vulnerabilities-in-smartermail · Nota
• https://osv.dev/vulnerability/CVE-2019-7212 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-7212 · Nota de Segurança