PT-2018-10124 · Synametrics · Synaman

Bzyo · Published 2018-09-14 · Updated 2019-10-03 · CVE-2018-10814

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Synametrics SynaMan version 4.0 build 1488

Description The issue concerns the use of cleartext password storage for SMTP credentials.

Recommendations For Synametrics SynaMan version 4.0 build 1488, consider updating the configuration to use secure password storage for SMTP credentials. As a temporary workaround, restrict access to the SMTP configuration to minimize the risk of exploitation.

Exploit

Fix

Insufficiently Protected Credentials

Weakness Enumeration

CWE-522

Related Identifiers

CVE-2018-10814

Affected Products

Synaman

References · 4

• 🔥 https://exploit-db.com/exploits/45387 · Exploit
• https://osv.dev/vulnerability/CVE-2018-10814 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-10814 · Security Note
• http://packetstormsecurity.com/files/149326/SynaMan-40-Build-1488-SMTP-Credential-Disclosure.html · Note