CVE-2019-20061

The user-introduction email in MFScripts YetiShare v3.5.2 through v4.5.4 may leak the (system-picked) password if this email is sent in cleartext

published February 10, 2020

CVSS
—
EPSS
1%
Percentile
59.3
In the wild
Unconfirmed
What it is

The user-introduction email in MFScripts YetiShare v3.5.2 through v4.5.4 may leak the (system-picked) password if this email is sent in cleartext. In other words, the user is not allowed to choose their own initial password.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00900 · 59.3th percentile
Published
2020-02-10T12:19Z
EPSS history
Timeline
  • 10 FEB 12:19Z
    The user-introduction email in MFScripts YetiShare v3.5.2 through v4.5.4 may leak the (system-picked) password if this email is sent in cleartext
    cvelistv5