high7.2
CVE-2019-6242
Kentico v10.0.42 allows Global Administrators to read the cleartext SMTP Password by navigating to the SMTP configuration page.
Impact
Kentico v10.0.42 allows Global Administrators to read the cleartext SMTP Password by navigating to the SMTP configuration page. NOTE: the vendor considers this a best-practice violation but not a vulnerability. The vendor plans to fix it at a future time
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Kentico | Xperience | Version 10.0.42 |