medium5.5
CVE-2021-26550
An issue was discovered in SmartFoxServer 2.17.0.
Impact
An issue was discovered in SmartFoxServer 2.17.0. Cleartext password disclosure can occur via /config/server.xml.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Smartfoxserver | Smartfoxserver | Version 2.17.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/161337/SmartFoxServer-2X-2.17.0-Credential-Disclosure.html
- https://www.smartfoxserver.com/
- https://www.zeroscience.mk/en/vulnerabilities/
- https://www.zeroscience.mk/en/vulnerabilities/ZSL-2021-5627.php
- http://packetstormsecurity.com/files/161337/SmartFoxServer-2X-2.17.0-Credential-Disclosure.html
- https://www.smartfoxserver.com/
- https://www.zeroscience.mk/en/vulnerabilities/
- https://www.zeroscience.mk/en/vulnerabilities/ZSL-2021-5627.php