high8.2
CVE-2019-7212
SmarterTools SmarterMail 16.x before build 6985 has hardcoded secret keys.
Impact
SmarterTools SmarterMail 16.x before build 6985 has hardcoded secret keys. An unauthenticated attacker could access other users’ emails and file attachments. It was also possible to interact with mailing lists.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Smartertools | Smartermail | from 16.0.6345 before 16.3.6985 |
Weakness classification
References
- NVD record
- CVE.org record
- https://www.nccgroup.trust/uk/our-research/technical-advisory-multiple-vulnerabilities-in-smartermail/
- https://www.smartertools.com/smartermail/release-notes/current
- https://www.nccgroup.trust/uk/our-research/technical-advisory-multiple-vulnerabilities-in-smartermail/
- https://www.smartertools.com/smartermail/release-notes/current